3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 1:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 0:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 4:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 3:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 1:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 3:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:19 executing program 4:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 1:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 3:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 0:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 4:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 5:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 4:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 3:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 1:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 0:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 5:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 5:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 0:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 2:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 1:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 3:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_1\x00'})

[  234.845733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  234.882512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
05:10:20 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f00000001c0))

05:10:20 executing program 0:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

05:10:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_1\x00'})

05:10:20 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_1\x00'})

05:10:20 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f00000001c0))

05:10:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:20 executing program 1:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0)
pwrite64(r2, &(0x7f000003bfff), 0x0, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="d96858937e35a6929b4a55916e449e19dd0f60ae20e8552142ef458688b03e9efc6b8668910e44a968ce3820ee51a7a338dcd4714fc4", 0x36}, {0x0}], 0x2, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x34c)
request_key(&(0x7f00000003c0)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffc)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
set_robust_list(0x0, 0x0)
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x7, 0x7, 0x0, 0x0, 0xf0], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/user\x00')
arch_prctl$ARCH_GET_GS(0x1004, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000006480)=""/4096, 0x1000}], 0x1)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)

[  235.056496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  235.066327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  235.081319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
05:10:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_1\x00'})

05:10:20 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_1\x00'})

05:10:20 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f00000001c0))

[  235.141110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
05:10:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f00000001c0))

[  235.217354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  235.237742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  235.254604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
05:10:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
setgid(0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

05:10:21 executing program 5:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfa})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

05:10:21 executing program 0:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

05:10:21 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_1\x00'})

[  235.299871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
05:10:21 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_1\x00'})

05:10:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
setgid(0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

05:10:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
setgid(0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

05:10:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
setgid(0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

05:10:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000180)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]})

05:10:21 executing program 0:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

05:10:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:21 executing program 4:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

05:10:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
setgid(0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

05:10:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000180)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]})

05:10:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
setgid(0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

05:10:21 executing program 4:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

[  235.826991] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  235.844198] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
05:10:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
setgid(0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

05:10:21 executing program 0:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

05:10:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000180)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]})

[  235.918486] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
05:10:21 executing program 4:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

05:10:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

[  236.035408] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
05:10:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000180)={[], [{@context={'context', 0x3d, 'sysadm_u'}}]})

05:10:22 executing program 0:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

05:10:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

[  236.506079] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
05:10:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:24 executing program 2:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

05:10:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000600)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000180)="800f00001000110019000300e6000000ffe0d202000000000100000809d90000004000000040000088000000000000006d5ebe5a0000fff053ef08063810292e9be790e506b743dcf8a604000000000000007cdf9f830500000000000000c4", 0x5f, 0x400}], 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")

05:10:24 executing program 3:
r0 = socket$inet(0x2, 0x80a, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000080))

05:10:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02070000100000000000fffb0000000008001200000001000000000000040000b52d000000e300000000000000000200e00040e0ff00000000000100000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

05:10:24 executing program 2:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

[  238.395667] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  238.428936] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
05:10:24 executing program 3:
r0 = socket$inet(0x2, 0x80a, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000080))

[  238.446730] EXT4-fs (loop1): Invalid log block size: 134217729
05:10:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000600)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000180)="800f00001000110019000300e6000000ffe0d202000000000100000809d90000004000000040000088000000000000006d5ebe5a0000fff053ef08063810292e9be790e506b743dcf8a604000000000000007cdf9f830500000000000000c4", 0x5f, 0x400}], 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")

05:10:24 executing program 2:
memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070")
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0)
dup3(r1, r2, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

05:10:24 executing program 3:
r0 = socket$inet(0x2, 0x80a, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000080))

05:10:24 executing program 3:
r0 = socket$inet(0x2, 0x80a, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000080))

[  238.604145] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  238.621900] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  238.640507] EXT4-fs (loop1): Invalid log block size: 134217729
05:10:24 executing program 0:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x0, &(0x7f0000ffb000/0x2000)=nil)

05:10:24 executing program 2:
r0 = socket$inet(0x2, 0x80a, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000080))

05:10:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000600)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000180)="800f00001000110019000300e6000000ffe0d202000000000100000809d90000004000000040000088000000000000006d5ebe5a0000fff053ef08063810292e9be790e506b743dcf8a604000000000000007cdf9f830500000000000000c4", 0x5f, 0x400}], 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")

05:10:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000168000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

05:10:24 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0)

05:10:24 executing program 0:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x0, &(0x7f0000ffb000/0x2000)=nil)

05:10:24 executing program 2:
r0 = socket$inet(0x2, 0x80a, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000080))

05:10:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

[  239.101092] mmap: syz-executor.4 (13600) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt.
[  239.102474] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
05:10:24 executing program 0:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x0, &(0x7f0000ffb000/0x2000)=nil)

05:10:24 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0)

05:10:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000168000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

05:10:25 executing program 0:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x0, &(0x7f0000ffb000/0x2000)=nil)

05:10:25 executing program 2:
r0 = socket$inet(0x2, 0x80a, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000080))

05:10:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

[  239.179434] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  239.208968] EXT4-fs (loop1): Invalid log block size: 134217729
05:10:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000600)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000180)="800f00001000110019000300e6000000ffe0d202000000000100000809d90000004000000040000088000000000000006d5ebe5a0000fff053ef08063810292e9be790e506b743dcf8a604000000000000007cdf9f830500000000000000c4", 0x5f, 0x400}], 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")

05:10:25 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0)

05:10:25 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000168000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

05:10:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000168000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

05:10:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:25 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0)

05:10:25 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000168000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

05:10:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000168000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

05:10:25 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0)

05:10:25 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0)

05:10:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

[  239.401872] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  239.453516] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
05:10:25 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

[  239.498618] EXT4-fs (loop1): Invalid log block size: 134217729
05:10:25 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0)

05:10:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:25 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000168000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

05:10:25 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:25 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:25 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:25 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffffffffa2c])

05:10:25 executing program 0:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:25 executing program 4:
syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local, @broadcast, [], {@can={0x8864, {{}, 0x0, 0x0, 0x0, 0x21, "f239b8f256869442"}}}}, 0x0)

05:10:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00\x95!q\x8f,s\a$)\x16\xfe\xcd\f\x06\x7f\xb6P<\x9e\x91\xe0\x84PuV\xbd#\x1fY\a\xd7\x03\x06m\x96\x043E\xbbT\x86\x96\xaa\xd8\x8e\x92t!\xfb\x8d\xdc\x91\x1c\x91\xe7l\x1c\xa4\xb874\x84@\xf4\x8dt\xbb\x03\xd8\xb8^RWh\xc3\x9d\tIp\xe2DN\x94\xb2\xee\xe6<\xb7\x9e\x1cZ*\xceO\xe6\x8f\x0e\xbb\x1a\x1cf\x87\xdbu\xf9\x8c%\x1e\x82\x172-\xac\xd9\x92+\x1fQI_X\xdc=\xdb\xc2,\x15p\xccp\xbe6\xacU\xf4\x99\x91\xbe\xa2?\xa9\x18\xed')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1, 0x78)

05:10:25 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48)

05:10:25 executing program 4:
syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local, @broadcast, [], {@can={0x8864, {{}, 0x0, 0x0, 0x0, 0x21, "f239b8f256869442"}}}}, 0x0)

05:10:25 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48)

05:10:25 executing program 5:
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)

05:10:25 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffffffffa2c])

05:10:25 executing program 0:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:26 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48)

05:10:26 executing program 4:
syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local, @broadcast, [], {@can={0x8864, {{}, 0x0, 0x0, 0x0, 0x21, "f239b8f256869442"}}}}, 0x0)

05:10:26 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffffffffa2c])

05:10:26 executing program 0:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:26 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 5:
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)

05:10:26 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48)

05:10:26 executing program 4:
syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local, @broadcast, [], {@can={0x8864, {{}, 0x0, 0x0, 0x0, 0x21, "f239b8f256869442"}}}}, 0x0)

05:10:26 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffffffffa2c])

05:10:26 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 5:
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)

05:10:26 executing program 0:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:26 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 5:
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)

05:10:26 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:26 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 3:
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)

05:10:27 executing program 1:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:27 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 3:
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)

05:10:27 executing program 2:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:27 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
close(r2)
r3 = socket(0x100000000000011, 0x3, 0x0)
bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280))
stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300))
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000480))
fstat(r0, &(0x7f00000004c0))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840))
getuid()
lstat(0x0, &(0x7f0000000580))
getresgid(0x0, &(0x7f0000000640), 0x0)
getresgid(0x0, 0x0, &(0x7f0000000740))
ftruncate(r4, 0x87ffd)
sendfile(r2, r4, 0x0, 0x800000000024)

05:10:27 executing program 3:
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)

05:10:27 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffffffffa2c])

05:10:27 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

05:10:27 executing program 1:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:27 executing program 2:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:27 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:27 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffffffffa2c])

05:10:27 executing program 1:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

[  241.833557] audit: type=1400 audit(1560921027.617:22): avc:  denied  { map } for  pid=13933 comm="syz-executor.0" path="/dev/binder0" dev="devtmpfs" ino=5440 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1
[  241.837979] binder: 13933:13934 unknown command 1023
05:10:27 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xfffffffffffffa2c])

[  241.889662] audit: type=1400 audit(1560921027.667:23): avc:  denied  { set_context_mgr } for  pid=13933 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  241.890694] binder: 13933:13943 unknown command 536871488
05:10:27 executing program 2:
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xc01, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0)

05:10:27 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

05:10:27 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

[  241.940154] binder: 13933:13947 BC_INCREFS_DONE u4000000000000000 no match
[  241.964577] binder: 13933:13934 ioctl c0306201 20000140 returned -22
[  241.977317] binder: 13933:13947 unknown command 1937009409
05:10:27 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

[  242.000117] binder: 13933:13954 Release 1 refcount change on invalid ref 985917153 ret -22
[  242.003422] binder: 13933:13947 ioctl c0306201 200002c0 returned -22
[  242.047042] binder: 13933:13954 unknown command 479
[  242.063146] binder: 13933:13943 ioctl c0306201 20000440 returned -22
[  242.066182] binder: 13933:13954 ioctl c0306201 200001c0 returned -22
[  242.087879] binder: 13933:13934 unknown command 0
[  242.102292] binder: 13933:13934 ioctl c0306201 200003c0 returned -22
[  242.138060] binder: 13933:13943 unknown command 1023
[  242.144724] binder: 13933:13947 unknown command 536871488
05:10:27 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

[  242.144736] binder: 13933:13954 BC_INCREFS_DONE u4000000000000000 no match
[  242.157509] binder: 13933:13947 ioctl c0306201 20000440 returned -22
[  242.165801] binder: 13933:13943 ioctl c0306201 20000140 returned -22
[  242.194995] binder: 13933:13954 unknown command 1937009409
[  242.226557] binder: 13933:13954 ioctl c0306201 200002c0 returned -22
05:10:28 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:28 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

[  242.412564] binder: 13973:13974 unknown command 1023
[  242.436444] binder: 13973:13974 ioctl c0306201 20000140 returned -22
[  242.466826] binder: BINDER_SET_CONTEXT_MGR already set
[  242.491849] binder: 13973:13978 ioctl 40046207 0 returned -16
[  242.506856] binder: 13973:13974 unknown command 536871488
[  242.514623] binder: 13973:13974 ioctl c0306201 20000440 returned -22
[  242.554995] binder: 13973:13974 BC_INCREFS_DONE u4000000000000000 no match
[  242.600147] binder: 13973:13978 Release 1 refcount change on invalid ref 985917153 ret -22
[  242.602108] binder: 13973:13974 unknown command 1937009409
[  242.617750] binder: 13973:13978 unknown command 479
[  242.640056] binder: 13973:13978 ioctl c0306201 200001c0 returned -22
05:10:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:28 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  242.659058] binder: 13973:13974 ioctl c0306201 200002c0 returned -22
[  242.675648] binder: 13973:13978 unknown command 0
[  242.693241] binder: 13973:13978 ioctl c0306201 200003c0 returned -22
05:10:28 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

05:10:28 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

[  242.865758] binder: 13990:13991 unknown command 1023
[  242.893723] binder: 13990:13991 ioctl c0306201 20000140 returned -22
[  242.919922] binder: BINDER_SET_CONTEXT_MGR already set
05:10:28 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

[  242.946272] binder: 13990:14000 ioctl 40046207 0 returned -16
[  242.959854] binder: 13990:13991 unknown command 536871488
[  242.976756] binder: 13990:13991 ioctl c0306201 20000440 returned -22
[  243.022202] binder: 13990:14000 BC_INCREFS_DONE u4000000000000000 no match
[  243.035143] binder: 13990:14000 unknown command 1937009409
[  243.059264] binder: 13990:14000 ioctl c0306201 200002c0 returned -22
05:10:28 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

[  243.071703] binder: 13990:13991 Release 1 refcount change on invalid ref 985917153 ret -22
[  243.094075] binder: 13990:13991 unknown command 479
[  243.131487] binder: 13990:13991 ioctl c0306201 200001c0 returned -22
[  243.177674] binder: 13990:13991 unknown command 0
05:10:29 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  243.199007] binder: 13990:13991 ioctl c0306201 200003c0 returned -22
05:10:29 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

[  243.350947] binder: 14014:14015 unknown command 1023
[  243.372697] binder: 14014:14015 ioctl c0306201 20000140 returned -22
[  243.405166] binder: BINDER_SET_CONTEXT_MGR already set
[  243.430209] binder: 14014:14020 ioctl 40046207 0 returned -16
[  243.445528] binder: 14014:14015 unknown command 536871488
[  243.452385] binder: 14014:14015 ioctl c0306201 20000440 returned -22
[  243.485540] binder: 14014:14015 BC_INCREFS_DONE u4000000000000000 no match
[  243.518167] binder: 14014:14015 unknown command 1937009409
[  243.531151] binder: 14014:14020 Release 1 refcount change on invalid ref 985917153 ret -22
[  243.541659] binder: 14014:14015 ioctl c0306201 200002c0 returned -22
[  243.555314] binder: 14014:14020 unknown command 479
[  243.596601] binder: 14014:14020 ioctl c0306201 200001c0 returned -22
05:10:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

[  243.642938] binder: 14014:14015 unknown command 0
[  243.657515] binder: 14014:14015 ioctl c0306201 200003c0 returned -22
05:10:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:29 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

05:10:29 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x20)
sendfile(r0, r0, &(0x7f0000000100), 0x7f8)
pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0/file0/file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000)

05:10:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:32 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:32 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

[  247.131786] binder: 14102:14106 unknown command 1023
[  247.176753] binder: 14102:14106 ioctl c0306201 20000140 returned -22
[  247.187055] binder: BINDER_SET_CONTEXT_MGR already set
[  247.194201] binder: 14109:14110 unknown command 1023
[  247.216797] binder: 14102:14117 ioctl 40046207 0 returned -16
[  247.226662] binder: 14109:14110 ioctl c0306201 20000140 returned -22
[  247.232452] binder: 14102:14106 unknown command 536871488
[  247.238935] binder: 14102:14106 ioctl c0306201 20000440 returned -22
[  247.239101] binder: BINDER_SET_CONTEXT_MGR already set
[  247.267632] binder: 14109:14116 ioctl 40046207 0 returned -16
[  247.278862] binder: 14102:14106 BC_INCREFS_DONE u4000000000000000 no match
[  247.288455] binder: 14109:14110 unknown command 536871488
[  247.298238] binder: 14109:14110 ioctl c0306201 20000440 returned -22
[  247.309294] binder: 14102:14106 unknown command 1937009409
[  247.323228] binder: 14102:14117 Release 1 refcount change on invalid ref 985917153 ret -22
[  247.333164] binder: 14102:14106 ioctl c0306201 200002c0 returned -22
[  247.339852] binder: 14109:14116 BC_INCREFS_DONE u4000000000000000 no match
[  247.339861] binder: 14109:14116 unknown command 1937009409
[  247.339869] binder: 14109:14116 ioctl c0306201 200002c0 returned -22
[  247.340600] binder: 14109:14116 Release 1 refcount change on invalid ref 985917153 ret -22
[  247.374425] binder: 14102:14117 unknown command 479
[  247.379487] binder: 14102:14117 ioctl c0306201 200001c0 returned -22
[  247.431946] binder: 14109:14110 unknown command 0
[  247.436925] binder: 14109:14110 ioctl c0306201 200003c0 returned -22
[  247.466284] binder: 14109:14116 unknown command 479
[  247.475307] binder: 14102:14106 unknown command 0
05:10:33 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:33 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  247.485633] binder: 14109:14116 ioctl c0306201 200001c0 returned -22
[  247.494430] binder: 14102:14106 ioctl c0306201 200003c0 returned -22
05:10:33 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  247.692592] binder: 14125:14128 unknown command 1023
[  247.698447] binder: 14126:14129 unknown command 1023
[  247.712215] binder: 14125:14128 ioctl c0306201 20000140 returned -22
[  247.718970] binder: 14126:14129 ioctl c0306201 20000140 returned -22
[  247.737204] binder: BINDER_SET_CONTEXT_MGR already set
[  247.743345] binder: 14126:14130 ioctl 40046207 0 returned -16
[  247.764397] binder: BINDER_SET_CONTEXT_MGR already set
[  247.789481] binder: 14125:14128 unknown command 536871488
[  247.797940] binder: 14125:14134 ioctl 40046207 0 returned -16
[  247.798669] binder: 14126:14129 unknown command 536871488
[  247.809742] binder: 14132:14133 unknown command 1023
[  247.815670] binder: 14125:14128 ioctl c0306201 20000440 returned -22
[  247.830809] binder: 14132:14133 ioctl c0306201 20000140 returned -22
[  247.837678] binder: 14126:14129 ioctl c0306201 20000440 returned -22
[  247.848139] binder: 14125:14134 BC_INCREFS_DONE u4000000000000000 no match
[  247.848695] binder: BINDER_SET_CONTEXT_MGR already set
[  247.860918] binder: 14126:14130 BC_INCREFS_DONE u4000000000000000 no match
[  247.867955] binder: 14126:14130 unknown command 1937009409
[  247.877771] binder: 14132:14133 unknown command 536871488
[  247.888307] binder: 14132:14135 ioctl 40046207 0 returned -16
[  247.896227] binder: 14125:14134 unknown command 1937009409
[  247.897553] binder: 14125:14128 Release 1 refcount change on invalid ref 985917153 ret -22
[  247.916855] binder: 14126:14129 Release 1 refcount change on invalid ref 985917153 ret -22
[  247.930344] binder: 14125:14134 ioctl c0306201 200002c0 returned -22
[  247.938438] binder: 14132:14133 ioctl c0306201 20000440 returned -22
[  247.946311] binder: 14132:14136 BC_INCREFS_DONE u4000000000000000 no match
[  247.950902] binder: 14126:14130 ioctl c0306201 200002c0 returned -22
[  247.960126] binder: 14126:14129 unknown command 479
[  247.973264] binder: 14125:14128 unknown command 479
[  247.983412] binder: 14132:14136 unknown command 1937009409
05:10:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

[  247.999349] binder: 14132:14133 Release 1 refcount change on invalid ref 985917153 ret -22
[  248.003178] binder: 14132:14136 ioctl c0306201 200002c0 returned -22
[  248.018373] binder: 14126:14129 ioctl c0306201 200001c0 returned -22
[  248.032039] binder: 14125:14134 unknown command 0
[  248.037016] binder: 14125:14134 ioctl c0306201 200003c0 returned -22
05:10:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

05:10:33 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  248.038966] binder: 14125:14128 ioctl c0306201 200001c0 returned -22
[  248.051866] binder: 14126:14130 unknown command 0
[  248.053601] binder: 14132:14133 unknown command 479
[  248.059825] binder: 14126:14130 ioctl c0306201 200003c0 returned -22
[  248.085513] binder: 14132:14133 ioctl c0306201 200001c0 returned -22
05:10:33 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:34 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  248.169536] binder: 14132:14133 unknown command 0
[  248.179057] binder: 14132:14133 ioctl c0306201 200003c0 returned -22
05:10:34 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  248.218135] binder: 14147:14150 unknown command 1023
[  248.258834] binder: 14147:14150 ioctl c0306201 20000140 returned -22
[  248.273861] binder: 14152:14153 unknown command 1023
[  248.280552] binder: BINDER_SET_CONTEXT_MGR already set
[  248.309266] binder: 14152:14153 ioctl c0306201 20000140 returned -22
[  248.315192] binder: 14147:14150 unknown command 536871488
[  248.318686] binder: 14147:14163 ioctl 40046207 0 returned -16
[  248.325632] binder: BINDER_SET_CONTEXT_MGR already set
[  248.334109] binder: 14147:14150 ioctl c0306201 20000440 returned -22
[  248.364386] binder: 14152:14164 ioctl 40046207 0 returned -16
[  248.374214] binder: 14152:14153 unknown command 536871488
[  248.377717] binder: 14147:14150 BC_INCREFS_DONE u4000000000000000 no match
[  248.383840] binder: 14160:14162 unknown command 1023
[  248.392505] binder: 14158:14159 unknown command 1023
[  248.397508] binder: 14147:14150 unknown command 1937009409
[  248.400175] binder: 14152:14153 ioctl c0306201 20000440 returned -22
[  248.411865] binder: 14147:14150 ioctl c0306201 200002c0 returned -22
[  248.422547] binder: 14158:14159 ioctl c0306201 20000140 returned -22
[  248.429236] binder: 14147:14163 Release 1 refcount change on invalid ref 985917153 ret -22
[  248.433104] binder: BINDER_SET_CONTEXT_MGR already set
[  248.443362] binder: 14152:14153 BC_INCREFS_DONE u4000000000000000 no match
[  248.449583] binder: BINDER_SET_CONTEXT_MGR already set
[  248.451790] binder: 14147:14163 unknown command 479
[  248.455852] binder: 14160:14166 ioctl 40046207 0 returned -16
[  248.462244] binder: 14160:14162 ioctl c0306201 20000140 returned -22
[  248.467931] binder: 14158:14165 ioctl 40046207 0 returned -16
[  248.479353] binder: 14152:14153 unknown command 1937009409
[  248.479420] binder: 14152:14153 ioctl c0306201 200002c0 returned -22
[  248.494280] binder: 14158:14159 unknown command 536871488
[  248.500429] binder: 14152:14164 Release 1 refcount change on invalid ref 985917153 ret -22
[  248.502720] binder: 14160:14167 unknown command 536871488
[  248.515552] binder: 14152:14164 unknown command 479
[  248.516738] binder: 14147:14163 ioctl c0306201 200001c0 returned -22
[  248.532156] binder: 14158:14159 ioctl c0306201 20000440 returned -22
[  248.533017] binder: 14147:14150 unknown command 0
[  248.547345] binder: 14152:14164 ioctl c0306201 200001c0 returned -22
[  248.547710] binder: 14158:14170 BC_INCREFS_DONE u4000000000000000 no match
[  248.574556] binder: 14160:14167 ioctl c0306201 20000440 returned -22
[  248.577477] binder: 14147:14150 ioctl c0306201 200003c0 returned -22
05:10:34 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  248.618574] binder: 14160:14162 BC_INCREFS_DONE u4000000000000000 no match
[  248.633766] binder: 14160:14162 unknown command 1937009409
[  248.641528] binder: 14158:14159 Release 1 refcount change on invalid ref 985917153 ret -22
[  248.642446] binder: 14152:14153 unknown command 0
[  248.662925] binder: 14158:14170 unknown command 1937009409
[  248.668704] binder: 14152:14153 ioctl c0306201 200003c0 returned -22
[  248.668822] binder: 14158:14159 unknown command 479
[  248.687658] binder: 14160:14166 Release 1 refcount change on invalid ref 985917153 ret -22
[  248.690972] binder: 14160:14162 ioctl c0306201 200002c0 returned -22
[  248.708648] binder: 14158:14170 ioctl c0306201 200002c0 returned -22
05:10:34 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  248.709581] binder: 14160:14166 unknown command 479
[  248.732186] binder: 14158:14159 ioctl c0306201 200001c0 returned -22
[  248.759419] binder: 14158:14165 unknown command 0
[  248.764843] binder: 14158:14165 ioctl c0306201 200003c0 returned -22
[  248.777701] binder: 14160:14162 unknown command 0
[  248.783778] binder: 14160:14162 ioctl c0306201 200003c0 returned -22
[  248.792077] binder: 14160:14166 ioctl c0306201 200001c0 returned -22
[  248.822489] binder: 14174:14176 unknown command 1023
05:10:34 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  248.849001] binder: 14174:14176 ioctl c0306201 20000140 returned -22
[  248.867120] binder: BINDER_SET_CONTEXT_MGR already set
[  248.872731] binder: 14174:14185 ioctl 40046207 0 returned -16
[  248.882427] binder: 14180:14183 unknown command 1023
05:10:34 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  248.910499] binder: 14180:14183 ioctl c0306201 20000140 returned -22
[  248.914930] binder: 14174:14176 unknown command 536871488
[  248.930288] binder: BINDER_SET_CONTEXT_MGR already set
[  248.935818] binder: 14180:14186 ioctl 40046207 0 returned -16
[  248.943095] binder: 14174:14176 ioctl c0306201 20000440 returned -22
[  248.965657] binder: 14180:14183 unknown command 536871488
[  248.971608] binder: 14174:14185 BC_INCREFS_DONE u4000000000000000 no match
[  248.978724] binder: 14174:14185 unknown command 1937009409
[  248.996702] binder: 14188:14189 unknown command 1023
[  249.006723] binder: 14180:14183 ioctl c0306201 20000440 returned -22
[  249.014099] binder: 14180:14186 BC_INCREFS_DONE u4000000000000000 no match
[  249.025230] binder: 14174:14176 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.030993] binder: 14174:14185 ioctl c0306201 200002c0 returned -22
[  249.035667] binder: 14188:14189 ioctl c0306201 20000140 returned -22
[  249.041650] binder: 14180:14186 unknown command 1937009409
[  249.050505] binder: BINDER_SET_CONTEXT_MGR already set
[  249.060620] binder: 14174:14176 unknown command 479
[  249.065737] binder: 14174:14176 ioctl c0306201 200001c0 returned -22
[  249.073269] binder: 14180:14195 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.080373] binder: 14188:14193 ioctl 40046207 0 returned -16
[  249.089420] binder: 14190:14192 unknown command 1023
[  249.094518] binder: 14188:14193 unknown command 536871488
[  249.101439] binder: 14190:14192 ioctl c0306201 20000140 returned -22
05:10:34 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffefc)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

[  249.110416] binder: 14180:14186 ioctl c0306201 200002c0 returned -22
[  249.115436] binder: 14180:14195 unknown command 479
[  249.121070] binder: 14188:14193 ioctl c0306201 20000440 returned -22
[  249.134941] binder: 14180:14195 ioctl c0306201 200001c0 returned -22
[  249.141986] binder: BINDER_SET_CONTEXT_MGR already set
[  249.153677] binder: 14190:14194 ioctl 40046207 0 returned -16
[  249.183878] binder: 14174:14176 unknown command 0
[  249.188879] binder: 14174:14176 ioctl c0306201 200003c0 returned -22
[  249.190045] binder: 14190:14192 unknown command 536871488
[  249.204536] binder: 14188:14189 BC_INCREFS_DONE u4000000000000000 no match
[  249.217558] binder: 14190:14192 ioctl c0306201 20000440 returned -22
[  249.227286] binder: 14180:14183 unknown command 0
05:10:35 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  249.231060] binder: 14188:14189 unknown command 1937009409
[  249.233591] binder: 14180:14183 ioctl c0306201 200003c0 returned -22
[  249.237872] binder: 14188:14189 ioctl c0306201 200002c0 returned -22
[  249.247147] binder: 14190:14194 BC_INCREFS_DONE u4000000000000000 no match
[  249.258274] binder: 14188:14193 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.261913] binder: 14190:14194 unknown command 1937009409
[  249.273381] binder: 14200:14201 unknown command 1023
05:10:35 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  249.278556] binder: 14200:14201 ioctl c0306201 20000140 returned -22
[  249.288508] binder: 14190:14194 ioctl c0306201 200002c0 returned -22
[  249.292087] binder: 14188:14193 unknown command 479
[  249.302371] binder: 14190:14192 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.308815] binder: 14188:14193 ioctl c0306201 200001c0 returned -22
[  249.323376] binder: BINDER_SET_CONTEXT_MGR already set
[  249.328698] binder: 14200:14212 ioctl 40046207 0 returned -16
[  249.334093] binder: 14190:14192 unknown command 479
[  249.369897] binder: 14200:14201 unknown command 536871488
[  249.370871] binder: 14190:14192 ioctl c0306201 200001c0 returned -22
[  249.378495] binder: 14200:14201 ioctl c0306201 20000440 returned -22
[  249.406698] binder: 14200:14201 BC_INCREFS_DONE u4000000000000000 no match
[  249.415182] binder: 14209:14210 unknown command 1023
[  249.429539] binder: 14200:14201 unknown command 1937009409
[  249.431438] binder: 14190:14194 unknown command 0
[  249.442550] binder: 14209:14210 ioctl c0306201 20000140 returned -22
[  249.445949] binder: 14200:14201 ioctl c0306201 200002c0 returned -22
[  249.454191] binder: 14190:14194 ioctl c0306201 200003c0 returned -22
[  249.461521] binder: 14200:14212 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.463072] binder: 14188:14189 unknown command 0
[  249.470855] binder: BINDER_SET_CONTEXT_MGR already set
[  249.477420] binder: 14213:14216 unknown command 1023
[  249.486790] binder: 14188:14189 ioctl c0306201 200003c0 returned -22
[  249.494331] binder: 14213:14216 ioctl c0306201 20000140 returned -22
[  249.501570] binder: 14200:14212 unknown command 479
[  249.513054] binder: 14209:14210 unknown command 536871488
[  249.514183] binder: 14209:14217 ioctl 40046207 0 returned -16
05:10:35 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  249.522351] binder: 14200:14212 ioctl c0306201 200001c0 returned -22
[  249.539815] binder: 14209:14210 ioctl c0306201 20000440 returned -22
[  249.549896] binder: BINDER_SET_CONTEXT_MGR already set
[  249.565996] binder: 14209:14210 BC_INCREFS_DONE u4000000000000000 no match
[  249.571823] binder: 14200:14201 unknown command 0
05:10:35 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  249.574786] binder: 14213:14216 ioctl 40046207 0 returned -16
[  249.585797] binder: 14213:14226 unknown command 536871488
[  249.602084] binder: 14209:14210 unknown command 1937009409
[  249.608366] binder: 14213:14226 ioctl c0306201 20000440 returned -22
[  249.609096] binder: 14200:14201 ioctl c0306201 200003c0 returned -22
[  249.625340] binder: 14209:14217 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.639866] binder: 14213:14216 BC_INCREFS_DONE u4000000000000000 no match
[  249.647380] binder: 14209:14210 ioctl c0306201 200002c0 returned -22
[  249.655629] binder: 14209:14217 unknown command 479
[  249.659333] binder: 14224:14228 unknown command 1023
[  249.661123] binder: 14213:14216 unknown command 1937009409
[  249.669068] binder: 14224:14228 ioctl c0306201 20000140 returned -22
05:10:35 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  249.671986] binder: 14209:14217 ioctl c0306201 200001c0 returned -22
[  249.688590] binder: 14213:14226 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.700907] binder: BINDER_SET_CONTEXT_MGR already set
[  249.706311] binder: 14224:14228 ioctl 40046207 0 returned -16
[  249.711509] binder: 14213:14216 ioctl c0306201 200002c0 returned -22
[  249.720362] binder: 14213:14226 unknown command 479
05:10:35 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  249.732350] binder: 14209:14210 unknown command 0
[  249.734115] binder: 14229:14230 unknown command 1023
[  249.740706] binder: 14209:14210 ioctl c0306201 200003c0 returned -22
[  249.749517] binder: 14224:14236 unknown command 536871488
[  249.752379] binder: 14213:14226 ioctl c0306201 200001c0 returned -22
[  249.784769] binder: BINDER_SET_CONTEXT_MGR already set
[  249.785513] binder: 14224:14236 ioctl c0306201 20000440 returned -22
[  249.794865] binder: 14229:14238 ioctl 40046207 0 returned -16
[  249.799470] binder: 14224:14228 BC_INCREFS_DONE u4000000000000000 no match
[  249.808135] binder: 14213:14216 unknown command 0
[  249.815962] binder: 14213:14216 ioctl c0306201 200003c0 returned -22
[  249.817788] binder: 14229:14230 ioctl c0306201 20000140 returned -22
05:10:35 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  249.832758] binder: 14229:14242 unknown command 536871488
[  249.858268] binder: 14224:14244 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.861456] binder: 14224:14228 unknown command 1937009409
[  249.872438] binder: 14229:14242 ioctl c0306201 20000440 returned -22
[  249.877838] binder: 14229:14238 BC_INCREFS_DONE u4000000000000000 no match
[  249.883183] binder: 14233:14235 unknown command 1023
[  249.910282] binder: 14229:14238 unknown command 1937009409
[  249.916754] binder: 14224:14236 unknown command 0
[  249.918478] binder: 14224:14244 unknown command 479
[  249.921950] binder: 14224:14236 ioctl c0306201 200003c0 returned -22
[  249.938904] binder: 14233:14235 ioctl c0306201 20000140 returned -22
[  249.942734] binder: BINDER_SET_CONTEXT_MGR already set
[  249.950530] binder: 14224:14228 ioctl c0306201 200002c0 returned -22
[  249.954660] binder: 14229:14238 ioctl c0306201 200002c0 returned -22
[  249.963293] binder: 14229:14230 Release 1 refcount change on invalid ref 985917153 ret -22
[  249.974168] binder: 14237:14243 unknown command 1023
[  249.986558] binder: 14224:14244 ioctl c0306201 200001c0 returned -22
[  249.996844] binder: 14233:14252 unknown command 536871488
[  250.003773] binder: 14233:14251 ioctl 40046207 0 returned -16
[  250.011025] binder: 14229:14230 unknown command 479
[  250.018090] binder: 14233:14252 ioctl c0306201 20000440 returned -22
[  250.026094] binder: 14237:14243 ioctl c0306201 20000140 returned -22
[  250.045304] binder: 14229:14230 ioctl c0306201 200001c0 returned -22
[  250.052905] binder: 14233:14235 BC_INCREFS_DONE u4000000000000000 no match
05:10:35 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.053883] binder: BINDER_SET_CONTEXT_MGR already set
[  250.068590] binder: 14233:14235 unknown command 1937009409
[  250.076153] binder: 14246:14249 unknown command 1023
[  250.083171] binder: 14229:14238 unknown command 0
[  250.088281] binder: 14237:14257 unknown command 536871488
[  250.088300] binder: 14229:14238 ioctl c0306201 200003c0 returned -22
[  250.103363] binder: 14233:14235 ioctl c0306201 200002c0 returned -22
[  250.104676] binder: 14233:14251 Release 1 refcount change on invalid ref 985917153 ret -22
[  250.113948] binder: 14237:14257 ioctl c0306201 20000440 returned -22
[  250.134372] binder: 14246:14249 ioctl c0306201 20000140 returned -22
[  250.141330] binder: 14237:14243 BC_INCREFS_DONE u4000000000000000 no match
[  250.148438] binder: 14237:14243 unknown command 1937009409
[  250.149023] binder: 14233:14251 unknown command 479
05:10:35 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.158260] binder: BINDER_SET_CONTEXT_MGR already set
[  250.172686] binder: 14237:14254 ioctl 40046207 0 returned -16
[  250.176938] binder: 14233:14251 ioctl c0306201 200001c0 returned -22
[  250.180738] binder: 14246:14260 ioctl 40046207 0 returned -16
[  250.191627] binder: 14237:14243 ioctl c0306201 200002c0 returned -22
[  250.205144] binder: 14246:14249 unknown command 536871488
05:10:36 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.211043] binder: 14246:14249 ioctl c0306201 20000440 returned -22
[  250.226538] binder: 14233:14252 unknown command 0
[  250.230615] binder: 14256:14259 unknown command 1023
[  250.231559] binder: 14233:14252 ioctl c0306201 200003c0 returned -22
[  250.253921] binder: 14237:14254 Release 1 refcount change on invalid ref 985917153 ret -22
[  250.254443] binder: 14256:14259 ioctl c0306201 20000140 returned -22
[  250.270598] binder: 14246:14260 BC_INCREFS_DONE u4000000000000000 no match
[  250.279283] binder: BINDER_SET_CONTEXT_MGR already set
[  250.287592] binder: 14256:14259 ioctl 40046207 0 returned -16
[  250.291154] binder: 14237:14254 unknown command 479
[  250.298768] binder: 14246:14260 unknown command 1937009409
05:10:36 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.314376] binder: 14256:14259 unknown command 536871488
[  250.314510] binder: 14237:14254 ioctl c0306201 200001c0 returned -22
[  250.333316] binder: 14246:14249 Release 1 refcount change on invalid ref 985917153 ret -22
[  250.343504] binder: 14256:14259 ioctl c0306201 20000440 returned -22
[  250.344487] binder: 14246:14260 ioctl c0306201 200002c0 returned -22
[  250.359044] binder: 14237:14243 unknown command 0
[  250.359805] binder: 14256:14273 BC_INCREFS_DONE u4000000000000000 no match
[  250.372483] binder: 14246:14249 unknown command 479
[  250.372576] binder: 14237:14243 ioctl c0306201 200003c0 returned -22
[  250.387684] binder: 14246:14249 ioctl c0306201 200001c0 returned -22
[  250.401692] binder: 14264:14268 unknown command 1023
[  250.402185] binder: 14266:14269 unknown command 1023
[  250.413541] binder: 14256:14277 Release 1 refcount change on invalid ref 985917153 ret -22
[  250.420262] binder: 14256:14273 unknown command 1937009409
[  250.427692] binder: 14264:14268 ioctl c0306201 20000140 returned -22
[  250.440074] binder: 14246:14260 unknown command 0
[  250.440409] binder: 14256:14277 unknown command 479
[  250.444970] binder: 14246:14260 ioctl c0306201 200003c0 returned -22
[  250.447120] binder: BINDER_SET_CONTEXT_MGR already set
05:10:36 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.459906] binder: 14266:14269 ioctl c0306201 20000140 returned -22
[  250.466288] binder: 14256:14273 ioctl c0306201 200002c0 returned -22
[  250.493840] binder: 14264:14285 unknown command 536871488
[  250.497045] binder: 14256:14259 unknown command 0
[  250.499633] binder: BINDER_SET_CONTEXT_MGR already set
[  250.509855] binder: 14266:14280 ioctl 40046207 0 returned -16
[  250.512187] binder: 14266:14269 unknown command 536871488
[  250.515927] binder: 14264:14275 ioctl 40046207 0 returned -16
[  250.526499] binder: 14272:14276 unknown command 1023
[  250.528254] binder: 14264:14285 ioctl c0306201 20000440 returned -22
[  250.536788] binder: 14256:14277 ioctl c0306201 200001c0 returned -22
[  250.542539] binder: 14264:14268 BC_INCREFS_DONE u4000000000000000 no match
[  250.553360] binder: 14256:14259 ioctl c0306201 200003c0 returned -22
05:10:36 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.558442] binder: 14266:14269 ioctl c0306201 20000440 returned -22
[  250.560972] binder: 14264:14268 unknown command 1937009409
[  250.574541] binder: 14264:14268 ioctl c0306201 200002c0 returned -22
[  250.575983] binder: BINDER_SET_CONTEXT_MGR already set
[  250.597429] binder: 14266:14280 BC_INCREFS_DONE u4000000000000000 no match
[  250.597541] binder: 14272:14276 ioctl c0306201 20000140 returned -22
05:10:36 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.612581] binder: 14266:14280 unknown command 1937009409
[  250.613489] binder: 14272:14282 ioctl 40046207 0 returned -16
[  250.629138] binder: 14272:14290 unknown command 536871488
[  250.641847] binder: 14272:14290 ioctl c0306201 20000440 returned -22
[  250.655124] binder: 14266:14269 Release 1 refcount change on invalid ref 985917153 ret -22
[  250.656062] binder: 14266:14280 ioctl c0306201 200002c0 returned -22
[  250.668511] binder: 14266:14269 unknown command 479
[  250.705671] binder: 14284:14287 unknown command 1023
[  250.708038] binder: 14264:14268 Release 1 refcount change on invalid ref 985917153 ret -22
[  250.719555] binder: 14266:14269 ioctl c0306201 200001c0 returned -22
[  250.723126] binder: 14292:14294 unknown command 1023
[  250.734891] binder: 14264:14268 unknown command 479
[  250.737705] binder: 14284:14287 ioctl c0306201 20000140 returned -22
[  250.741823] binder: 14264:14268 ioctl c0306201 200001c0 returned -22
[  250.753574] binder: BINDER_SET_CONTEXT_MGR already set
[  250.759054] binder: 14284:14295 ioctl 40046207 0 returned -16
[  250.759556] binder: 14272:14276 BC_INCREFS_DONE u4000000000000000 no match
[  250.765707] binder: 14292:14294 ioctl c0306201 20000140 returned -22
[  250.776351] binder: 14289:14293 unknown command 1023
[  250.786902] binder: BINDER_SET_CONTEXT_MGR already set
[  250.787799] binder: 14284:14295 unknown command 536871488
[  250.792684] binder: 14272:14276 unknown command 1937009409
[  250.803581] binder: 14284:14295 ioctl c0306201 20000440 returned -22
[  250.806627] binder: 14289:14293 ioctl c0306201 20000140 returned -22
[  250.811587] binder: 14264:14275 unknown command 0
[  250.817472] binder: 14292:14299 ioctl 40046207 0 returned -16
[  250.823823] binder: 14266:14269 unknown command 0
[  250.828111] binder: 14272:14282 Release 1 refcount change on invalid ref 985917153 ret -22
[  250.844972] binder: 14284:14287 BC_INCREFS_DONE u4000000000000000 no match
[  250.846105] binder: BINDER_SET_CONTEXT_MGR already set
[  250.858173] binder: 14292:14294 unknown command 536871488
05:10:36 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.860792] binder: 14284:14287 unknown command 1937009409
[  250.864175] binder: 14292:14294 ioctl c0306201 20000440 returned -22
[  250.876280] binder: 14266:14269 ioctl c0306201 200003c0 returned -22
[  250.883041] binder: 14264:14275 ioctl c0306201 200003c0 returned -22
[  250.883775] binder: 14272:14276 ioctl c0306201 200002c0 returned -22
[  250.893148] binder: 14289:14302 ioctl 40046207 0 returned -16
[  250.897442] binder: 14289:14293 unknown command 536871488
[  250.909056] binder: 14272:14290 unknown command 0
05:10:36 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  250.917154] binder: 14272:14290 ioctl c0306201 200003c0 returned -22
[  250.924013] binder: 14284:14287 ioctl c0306201 200002c0 returned -22
[  250.932277] binder: 14284:14304 Release 1 refcount change on invalid ref 985917153 ret -22
[  250.933969] binder: 14292:14294 BC_INCREFS_DONE u4000000000000000 no match
[  250.951353] binder: 14272:14282 unknown command 479
[  250.956614] binder: 14289:14293 ioctl c0306201 20000440 returned -22
[  250.964445] binder: 14272:14282 ioctl c0306201 200001c0 returned -22
[  250.979301] binder: 14289:14302 BC_INCREFS_DONE u4000000000000000 no match
[  250.979364] binder: 14284:14304 unknown command 479
[  250.988040] binder: 14292:14294 unknown command 1937009409
[  250.993147] binder: 14284:14304 ioctl c0306201 200001c0 returned -22
05:10:36 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  251.009934] binder: 14292:14299 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.015928] binder: 14289:14302 unknown command 1937009409
[  251.034089] binder: 14289:14293 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.036201] binder: 14292:14294 ioctl c0306201 200002c0 returned -22
[  251.044232] binder: 14284:14287 unknown command 0
[  251.061946] binder: 14292:14299 unknown command 479
[  251.062867] binder: 14307:14316 unknown command 1023
[  251.067320] binder: 14289:14293 unknown command 479
[  251.074567] binder: 14289:14302 ioctl c0306201 200002c0 returned -22
[  251.087852] binder: 14292:14299 ioctl c0306201 200001c0 returned -22
[  251.091942] binder: 14292:14317 unknown command 0
[  251.095076] binder: 14284:14287 ioctl c0306201 200003c0 returned -22
[  251.113030] binder: BINDER_SET_CONTEXT_MGR already set
[  251.118607] binder: 14307:14308 ioctl 40046207 0 returned -16
[  251.123613] binder: 14289:14293 ioctl c0306201 200001c0 returned -22
[  251.128837] binder: 14310:14312 unknown command 1023
[  251.137983] binder: 14307:14316 ioctl c0306201 20000140 returned -22
[  251.144972] binder: 14292:14317 ioctl c0306201 200003c0 returned -22
[  251.155656] binder: 14307:14308 unknown command 536871488
05:10:36 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:37 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  251.163058] binder: 14310:14312 ioctl c0306201 20000140 returned -22
[  251.174862] binder: BINDER_SET_CONTEXT_MGR already set
[  251.182327] binder: 14310:14322 ioctl 40046207 0 returned -16
[  251.188527] binder: 14307:14308 ioctl c0306201 20000440 returned -22
[  251.189560] binder: 14314:14319 unknown command 1023
[  251.206375] binder: 14307:14316 BC_INCREFS_DONE u4000000000000000 no match
[  251.229480] binder: 14307:14316 unknown command 1937009409
[  251.235304] binder: 14314:14319 ioctl c0306201 20000140 returned -22
[  251.244757] binder: 14310:14312 unknown command 536871488
[  251.246543] binder: BINDER_SET_CONTEXT_MGR already set
[  251.262842] binder: 14307:14308 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.265021] binder: 14314:14331 ioctl 40046207 0 returned -16
[  251.274612] binder: 14310:14312 ioctl c0306201 20000440 returned -22
[  251.285613] binder: 14327:14328 unknown command 1023
[  251.288474] binder: 14307:14308 unknown command 479
[  251.291172] binder: 14289:14293 unknown command 0
[  251.296214] binder: 14310:14322 BC_INCREFS_DONE u4000000000000000 no match
[  251.308337] binder: 14307:14316 ioctl c0306201 200002c0 returned -22
[  251.314815] binder: 14314:14319 unknown command 536871488
[  251.315183] binder: 14307:14308 ioctl c0306201 200001c0 returned -22
[  251.322253] binder: 14289:14293 ioctl c0306201 200003c0 returned -22
[  251.327752] binder: 14310:14322 unknown command 1937009409
[  251.336770] binder: 14314:14319 ioctl c0306201 20000440 returned -22
[  251.340126] binder: BINDER_SET_CONTEXT_MGR already set
[  251.346513] binder: 14327:14328 ioctl c0306201 20000140 returned -22
[  251.356438] binder: 14310:14312 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.380322] binder: 14310:14322 ioctl c0306201 200002c0 returned -22
[  251.385878] binder: 14327:14328 unknown command 536871488
[  251.397169] binder: 14310:14312 unknown command 479
[  251.404968] binder: 14327:14336 ioctl 40046207 0 returned -16
[  251.406117] binder: 14330:14332 unknown command 1023
[  251.414513] binder: 14310:14312 ioctl c0306201 200001c0 returned -22
[  251.419907] binder: 14314:14319 BC_INCREFS_DONE u4000000000000000 no match
05:10:37 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  251.431030] binder: 14327:14328 ioctl c0306201 20000440 returned -22
[  251.440496] binder: 14330:14332 ioctl c0306201 20000140 returned -22
[  251.444538] binder: 14307:14308 unknown command 0
[  251.447214] binder: 14314:14319 unknown command 1937009409
[  251.455631] binder: 14307:14308 ioctl c0306201 200003c0 returned -22
[  251.464673] binder: BINDER_SET_CONTEXT_MGR already set
[  251.474687] binder: 14327:14336 BC_INCREFS_DONE u4000000000000000 no match
[  251.476065] binder: 14314:14331 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.481968] binder: 14330:14337 ioctl 40046207 0 returned -16
[  251.499003] binder: 14314:14319 ioctl c0306201 200002c0 returned -22
[  251.506560] binder: 14327:14336 unknown command 1937009409
[  251.512213] binder: 14330:14332 unknown command 536871488
[  251.512271] binder: 14330:14332 ioctl c0306201 20000440 returned -22
[  251.512667] binder: 14330:14332 BC_INCREFS_DONE u4000000000000000 no match
05:10:37 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  251.518436] binder: 14327:14336 ioctl c0306201 200002c0 returned -22
[  251.529382] binder: 14327:14328 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.554923] binder: 14310:14312 unknown command 0
[  251.563815] binder: 14314:14331 unknown command 479
[  251.565674] binder: 14310:14312 ioctl c0306201 200003c0 returned -22
05:10:37 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  251.595493] binder: 14330:14332 unknown command 1937009409
[  251.617378] binder: 14330:14337 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.626012] binder: 14314:14331 ioctl c0306201 200001c0 returned -22
[  251.626539] binder: 14344:14348 unknown command 1023
[  251.634237] binder: 14338:14342 unknown command 1023
[  251.640532] binder: 14330:14337 unknown command 479
[  251.645294] binder: 14314:14319 unknown command 0
[  251.653734] binder: 14330:14337 ioctl c0306201 200001c0 returned -22
[  251.655692] binder: 14327:14328 unknown command 479
[  251.664075] binder: 14344:14348 ioctl c0306201 20000140 returned -22
[  251.665870] binder: 14330:14332 ioctl c0306201 200002c0 returned -22
[  251.679085] binder: 14314:14319 ioctl c0306201 200003c0 returned -22
[  251.681436] binder: BINDER_SET_CONTEXT_MGR already set
[  251.691545] binder: 14338:14342 ioctl c0306201 20000140 returned -22
[  251.699324] binder: 14327:14336 unknown command 0
[  251.704447] binder: 14327:14336 ioctl c0306201 200003c0 returned -22
[  251.713343] binder: 14327:14328 ioctl c0306201 200001c0 returned -22
[  251.735323] binder: 14344:14356 ioctl 40046207 0 returned -16
[  251.735334] binder: BINDER_SET_CONTEXT_MGR already set
[  251.743678] binder: 14344:14348 unknown command 536871488
[  251.746822] binder: 14338:14347 ioctl 40046207 0 returned -16
[  251.754683] binder: 14351:14352 unknown command 1023
[  251.763906] binder: 14344:14348 ioctl c0306201 20000440 returned -22
[  251.769409] binder: 14338:14342 unknown command 536871488
[  251.771018] binder: 14351:14352 ioctl c0306201 20000140 returned -22
[  251.776130] binder: 14338:14342 ioctl c0306201 20000440 returned -22
05:10:37 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:37 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  251.790371] binder: 14338:14342 BC_INCREFS_DONE u4000000000000000 no match
[  251.808422] binder: 14330:14332 unknown command 0
[  251.808826] binder: BINDER_SET_CONTEXT_MGR already set
[  251.818924] binder: 14330:14332 ioctl c0306201 200003c0 returned -22
[  251.821870] binder: 14344:14348 BC_INCREFS_DONE u4000000000000000 no match
[  251.833764] binder: 14351:14362 ioctl 40046207 0 returned -16
05:10:37 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  251.846658] binder: 14338:14347 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.854716] binder: 14344:14348 unknown command 1937009409
[  251.860438] binder: 14338:14347 unknown command 479
[  251.875695] binder: 14338:14342 unknown command 1937009409
[  251.879159] binder: 14344:14356 Release 1 refcount change on invalid ref 985917153 ret -22
[  251.884932] binder: 14338:14347 ioctl c0306201 200001c0 returned -22
[  251.890175] binder: 14344:14356 unknown command 479
[  251.904723] binder: 14338:14342 ioctl c0306201 200002c0 returned -22
[  251.909581] binder: 14344:14348 ioctl c0306201 200002c0 returned -22
[  251.934744] binder: 14351:14352 unknown command 536871488
[  251.936788] binder: 14338:14361 unknown command 0
05:10:37 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  251.940860] binder: 14351:14352 ioctl c0306201 20000440 returned -22
[  251.945373] binder: 14338:14361 ioctl c0306201 200003c0 returned -22
[  251.982731] binder: 14344:14356 ioctl c0306201 200001c0 returned -22
[  251.986814] binder: 14369:14372 unknown command 1023
[  251.989479] binder: 14351:14362 BC_INCREFS_DONE u4000000000000000 no match
[  252.009033] binder: 14344:14348 unknown command 0
[  252.012543] binder: 14369:14372 ioctl c0306201 20000140 returned -22
[  252.020274] binder: 14344:14348 ioctl c0306201 200003c0 returned -22
[  252.031534] binder: 14351:14362 unknown command 1937009409
[  252.034870] binder: BINDER_SET_CONTEXT_MGR already set
[  252.038436] binder: 14364:14368 unknown command 1023
[  252.053679] binder: 14351:14383 Release 1 refcount change on invalid ref 985917153 ret -22
[  252.060086] binder: 14351:14362 ioctl c0306201 200002c0 returned -22
[  252.066397] binder: 14369:14382 ioctl 40046207 0 returned -16
[  252.071050] binder: 14367:14371 unknown command 1023
[  252.075479] binder: 14378:14379 unknown command 1023
[  252.079798] binder: 14367:14371 ioctl c0306201 20000140 returned -22
[  252.091205] binder: 14369:14372 unknown command 536871488
[  252.092809] binder: 14364:14368 ioctl c0306201 20000140 returned -22
05:10:37 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  252.097390] binder: BINDER_SET_CONTEXT_MGR already set
[  252.120256] binder: 14369:14372 ioctl c0306201 20000440 returned -22
[  252.127362] binder: BINDER_SET_CONTEXT_MGR already set
[  252.133471] binder: 14367:14381 ioctl 40046207 0 returned -16
[  252.134979] binder: BINDER_SET_CONTEXT_MGR already set
[  252.140378] binder: 14364:14376 ioctl 40046207 0 returned -16
[  252.151132] binder: 14351:14383 unknown command 479
[  252.156482] binder: 14378:14379 ioctl c0306201 20000140 returned -22
[  252.156886] binder: 14364:14368 unknown command 536871488
[  252.165540] binder: 14351:14383 ioctl c0306201 200001c0 returned -22
[  252.177522] binder: 14351:14362 unknown command 0
[  252.182582] binder: 14369:14382 BC_INCREFS_DONE u4000000000000000 no match
[  252.182811] binder: 14351:14362 ioctl c0306201 200003c0 returned -22
[  252.190504] binder: 14378:14390 unknown command 536871488
[  252.202176] binder: 14369:14382 unknown command 1937009409
[  252.206041] binder: 14364:14368 ioctl c0306201 20000440 returned -22
[  252.208203] binder: 14369:14382 ioctl c0306201 200002c0 returned -22
[  252.221534] binder: 14378:14390 ioctl c0306201 20000440 returned -22
[  252.228240] binder: 14367:14371 unknown command 536871488
[  252.236836] binder: 14367:14371 ioctl c0306201 20000440 returned -22
[  252.238681] binder: 14369:14372 Release 1 refcount change on invalid ref 985917153 ret -22
05:10:38 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  252.258519] binder: 14378:14386 ioctl 40046207 0 returned -16
[  252.258534] binder: 14364:14376 BC_INCREFS_DONE u4000000000000000 no match
[  252.274451] binder: 14385:14387 unknown command 1023
[  252.281698] binder: 14369:14372 unknown command 479
[  252.287398] binder: 14367:14371 BC_INCREFS_DONE u4000000000000000 no match
[  252.290008] binder: 14385:14387 ioctl c0306201 20000140 returned -22
[  252.307913] binder: 14364:14376 unknown command 1937009409
[  252.313275] binder: 14364:14368 Release 1 refcount change on invalid ref 985917153 ret -22
[  252.318002] binder: 14378:14379 BC_INCREFS_DONE u4000000000000000 no match
[  252.326253] binder: BINDER_SET_CONTEXT_MGR already set
[  252.330623] binder: 14378:14379 unknown command 1937009409
[  252.335372] binder: 14367:14381 Release 1 refcount change on invalid ref 985917153 ret -22
[  252.341461] binder: 14369:14372 ioctl c0306201 200001c0 returned -22
[  252.349379] binder: 14367:14381 unknown command 479
[  252.358440] binder: 14367:14371 unknown command 1937009409
[  252.369170] binder: 14364:14376 ioctl c0306201 200002c0 returned -22
[  252.369768] binder: 14364:14368 unknown command 479
[  252.379063] binder: 14369:14382 unknown command 0
[  252.387218] binder: 14369:14382 ioctl c0306201 200003c0 returned -22
[  252.391804] binder: 14385:14395 ioctl 40046207 0 returned -16
[  252.404087] binder: 14385:14387 unknown command 536871488
[  252.405985] binder: 14378:14386 Release 1 refcount change on invalid ref 985917153 ret -22
[  252.409895] binder: 14385:14387 ioctl c0306201 20000440 returned -22
[  252.425395] binder: 14367:14381 ioctl c0306201 200001c0 returned -22
[  252.427148] binder: 14367:14371 ioctl c0306201 200002c0 returned -22
[  252.437891] binder: 14364:14403 unknown command 0
[  252.439350] binder: 14378:14379 ioctl c0306201 200002c0 returned -22
[  252.449422] binder: 14364:14368 ioctl c0306201 200001c0 returned -22
[  252.454096] binder: 14385:14396 BC_INCREFS_DONE u4000000000000000 no match
[  252.461595] binder: 14392:14393 unknown command 1023
[  252.472717] binder: 14378:14386 unknown command 479
[  252.478888] binder: 14367:14398 unknown command 0
[  252.482628] binder: 14378:14390 unknown command 0
[  252.484199] binder: 14367:14398 ioctl c0306201 200003c0 returned -22
[  252.488621] binder: 14378:14390 ioctl c0306201 200003c0 returned -22
[  252.493772] binder: 14385:14396 unknown command 1937009409
05:10:38 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  252.505738] binder: 14364:14403 ioctl c0306201 200003c0 returned -22
[  252.519472] binder: 14385:14395 Release 1 refcount change on invalid ref 985917153 ret -22
[  252.535505] binder: 14378:14386 ioctl c0306201 200001c0 returned -22
[  252.546790] binder: BINDER_SET_CONTEXT_MGR already set
[  252.552318] binder: 14385:14395 unknown command 479
05:10:38 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:38 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  252.553604] binder: 14385:14396 ioctl c0306201 200002c0 returned -22
[  252.557564] binder: 14392:14393 ioctl c0306201 20000140 returned -22
[  252.575525] binder: 14392:14408 ioctl 40046207 0 returned -16
[  252.587323] binder: 14392:14411 unknown command 536871488
[  252.588245] binder: 14385:14395 ioctl c0306201 200001c0 returned -22
[  252.617899] binder: 14392:14411 ioctl c0306201 20000440 returned -22
[  252.654457] binder: 14414:14418 unknown command 1023
[  252.659904] binder: 14392:14393 BC_INCREFS_DONE u4000000000000000 no match
05:10:38 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  252.676293] binder: 14392:14393 unknown command 1937009409
[  252.682215] binder: 14385:14387 unknown command 0
[  252.684672] binder: 14414:14418 ioctl c0306201 20000140 returned -22
[  252.687175] binder: 14385:14387 ioctl c0306201 200003c0 returned -22
[  252.707223] binder: BINDER_SET_CONTEXT_MGR already set
[  252.708188] binder: 14392:14408 Release 1 refcount change on invalid ref 985917153 ret -22
05:10:38 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  252.724396] binder: 14410:14421 unknown command 1023
[  252.730623] binder: 14417:14419 unknown command 1023
[  252.732376] binder: 14410:14421 ioctl c0306201 20000140 returned -22
[  252.737055] binder: 14414:14422 ioctl 40046207 0 returned -16
[  252.742893] binder: 14392:14393 ioctl c0306201 200002c0 returned -22
[  252.757088] binder: 14392:14408 unknown command 479
[  252.762776] binder: 14414:14426 unknown command 536871488
[  252.769236] binder: 14392:14408 ioctl c0306201 200001c0 returned -22
[  252.778450] binder: 14417:14419 ioctl c0306201 20000140 returned -22
[  252.779553] binder: BINDER_SET_CONTEXT_MGR already set
[  252.790999] binder: 14414:14426 ioctl c0306201 20000440 returned -22
[  252.792003] binder: 14392:14411 unknown command 0
[  252.808004] binder: 14414:14422 BC_INCREFS_DONE u4000000000000000 no match
[  252.819270] binder: 14410:14415 ioctl 40046207 0 returned -16
[  252.825437] binder: BINDER_SET_CONTEXT_MGR already set
[  252.830616] binder: 14392:14411 ioctl c0306201 200003c0 returned -22
[  252.835895] binder: 14417:14431 ioctl 40046207 0 returned -16
[  252.848326] binder: 14410:14421 unknown command 536871488
[  252.849510] binder: 14414:14422 unknown command 1937009409
[  252.859443] binder: 14414:14418 Release 1 refcount change on invalid ref 985917153 ret -22
[  252.860532] binder: 14410:14421 ioctl c0306201 20000440 returned -22
[  252.868784] binder: 14417:14419 unknown command 536871488
[  252.883442] binder: 14414:14418 unknown command 479
[  252.888553] binder: 14414:14418 ioctl c0306201 200001c0 returned -22
[  252.892249] binder: 14414:14422 ioctl c0306201 200002c0 returned -22
[  252.895784] binder: 14417:14419 ioctl c0306201 20000440 returned -22
[  252.904501] binder: 14424:14429 unknown command 1023
[  252.920525] binder: 14410:14415 BC_INCREFS_DONE u4000000000000000 no match
05:10:38 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  252.927653] binder: 14410:14415 unknown command 1937009409
[  252.930836] binder: 14428:14430 unknown command 1023
[  252.943120] binder: 14424:14429 ioctl c0306201 20000140 returned -22
[  252.950009] binder: 14428:14430 ioctl c0306201 20000140 returned -22
[  252.950350] binder: BINDER_SET_CONTEXT_MGR already set
[  252.965441] binder: 14424:14435 ioctl 40046207 0 returned -16
[  252.973804] binder: 14410:14415 ioctl c0306201 200002c0 returned -22
[  252.974341] binder: 14410:14421 Release 1 refcount change on invalid ref 985917153 ret -22
[  252.982535] binder: 14417:14419 BC_INCREFS_DONE u4000000000000000 no match
[  252.991336] binder: 14410:14421 unknown command 479
[  252.997457] binder: BINDER_SET_CONTEXT_MGR already set
[  253.006625] binder: 14424:14429 unknown command 536871488
[  253.006722] binder: 14428:14433 ioctl 40046207 0 returned -16
[  253.017904] binder: 14424:14429 ioctl c0306201 20000440 returned -22
[  253.018527] binder: 14417:14431 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.025735] binder: 14410:14421 ioctl c0306201 200001c0 returned -22
[  253.050080] binder: 14414:14418 unknown command 0
[  253.055190] binder: 14414:14418 ioctl c0306201 200003c0 returned -22
[  253.057473] binder: 14424:14429 BC_INCREFS_DONE u4000000000000000 no match
[  253.066471] binder: 14417:14431 unknown command 479
05:10:38 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.074522] binder: 14424:14429 unknown command 1937009409
[  253.091805] binder: 14417:14419 unknown command 1937009409
[  253.103659] binder: 14424:14435 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.106180] binder: 14428:14430 unknown command 536871488
[  253.116681] binder: 14437:14439 unknown command 1023
[  253.129625] binder: 14424:14435 unknown command 479
[  253.134263] binder: 14424:14429 ioctl c0306201 200002c0 returned -22
[  253.135238] binder: 14417:14431 ioctl c0306201 200001c0 returned -22
[  253.143310] binder: 14417:14434 unknown command 0
[  253.154300] binder: 14417:14419 ioctl c0306201 200002c0 returned -22
[  253.163567] binder: 14424:14435 ioctl c0306201 200001c0 returned -22
[  253.164566] binder: 14417:14434 ioctl c0306201 200003c0 returned -22
[  253.171293] binder: 14437:14439 ioctl c0306201 20000140 returned -22
[  253.183617] binder: BINDER_SET_CONTEXT_MGR already set
[  253.183743] binder: 14428:14433 BC_INCREFS_DONE u4000000000000000 no match
[  253.189097] binder: 14428:14430 ioctl c0306201 20000440 returned -22
[  253.206728] binder: 14428:14433 unknown command 1937009409
[  253.215274] binder: 14437:14453 unknown command 536871488
[  253.221515] binder: 14424:14435 unknown command 0
05:10:39 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.223319] binder: 14410:14415 unknown command 0
[  253.231500] binder: 14428:14455 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.231887] binder: 14410:14415 ioctl c0306201 200003c0 returned -22
[  253.248347] binder: 14437:14452 ioctl 40046207 0 returned -16
[  253.255124] binder: 14424:14435 ioctl c0306201 200003c0 returned -22
[  253.265029] binder: 14437:14458 BC_INCREFS_DONE u4000000000000000 no match
[  253.265383] binder: 14428:14433 ioctl c0306201 200002c0 returned -22
05:10:39 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.284031] binder: 14447:14450 unknown command 1023
[  253.285951] binder: 14428:14455 unknown command 479
[  253.289634] binder: 14437:14453 ioctl c0306201 20000440 returned -22
[  253.300888] binder: 14437:14458 unknown command 1937009409
[  253.306985] binder: 14447:14450 ioctl c0306201 20000140 returned -22
[  253.325503] binder: 14437:14439 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.343495] binder: 14437:14458 ioctl c0306201 200002c0 returned -22
[  253.345670] binder: 14437:14439 unknown command 479
[  253.351397] binder: 14428:14455 ioctl c0306201 200001c0 returned -22
[  253.363629] binder: BINDER_SET_CONTEXT_MGR already set
[  253.367577] binder: 14437:14439 ioctl c0306201 200001c0 returned -22
[  253.383400] binder: 14447:14462 ioctl 40046207 0 returned -16
05:10:39 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.386857] binder: 14447:14450 unknown command 536871488
[  253.391816] binder: 14456:14459 unknown command 1023
[  253.409160] binder: 14456:14459 ioctl c0306201 20000140 returned -22
[  253.417686] binder: 14447:14450 ioctl c0306201 20000440 returned -22
[  253.429977] binder: BINDER_SET_CONTEXT_MGR already set
[  253.441275] binder: 14428:14430 unknown command 0
[  253.446338] binder: 14428:14430 ioctl c0306201 200003c0 returned -22
[  253.453074] binder: 14447:14462 BC_INCREFS_DONE u4000000000000000 no match
[  253.467233] binder: 14447:14462 unknown command 1937009409
[  253.477548] binder: 14456:14459 ioctl 40046207 0 returned -16
[  253.487217] binder: 14464:14465 unknown command 1023
05:10:39 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.491485] binder: 14447:14462 ioctl c0306201 200002c0 returned -22
[  253.493010] binder: 14456:14471 unknown command 536871488
[  253.509602] binder: 14447:14450 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.525983] binder: 14437:14439 unknown command 0
[  253.531554] binder: 14437:14439 ioctl c0306201 200003c0 returned -22
[  253.540098] binder: BINDER_SET_CONTEXT_MGR already set
[  253.547208] binder: 14464:14469 ioctl 40046207 0 returned -16
[  253.549180] binder: 14456:14459 BC_INCREFS_DONE u4000000000000000 no match
[  253.564629] binder: 14464:14465 ioctl c0306201 20000140 returned -22
[  253.572439] binder: 14447:14450 unknown command 479
[  253.581155] binder: 14464:14469 unknown command 536871488
[  253.582038] binder: 14456:14459 unknown command 1937009409
05:10:39 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.587524] binder: 14456:14471 ioctl c0306201 20000440 returned -22
[  253.607470] binder: 14447:14462 unknown command 0
[  253.609239] binder: 14470:14472 unknown command 1023
[  253.612586] binder: 14447:14462 ioctl c0306201 200003c0 returned -22
[  253.614267] binder: 14447:14450 ioctl c0306201 200001c0 returned -22
[  253.620667] binder: 14456:14478 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.633480] binder: 14464:14465 BC_INCREFS_DONE u4000000000000000 no match
[  253.647417] binder: 14470:14472 ioctl c0306201 20000140 returned -22
[  253.647552] binder: 14464:14469 ioctl c0306201 20000440 returned -22
[  253.659967] binder: BINDER_SET_CONTEXT_MGR already set
[  253.664920] binder: 14464:14465 unknown command 1937009409
[  253.673000] binder: 14456:14459 ioctl c0306201 200002c0 returned -22
[  253.678418] binder: 14464:14486 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.688239] binder: 14470:14482 ioctl 40046207 0 returned -16
05:10:39 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.706959] binder: 14470:14472 unknown command 536871488
[  253.713930] binder: 14475:14477 unknown command 1023
[  253.718389] binder: 14464:14465 ioctl c0306201 200002c0 returned -22
[  253.719389] binder: 14470:14472 ioctl c0306201 20000440 returned -22
[  253.739681] binder: 14464:14486 unknown command 479
[  253.749596] binder: 14475:14477 ioctl c0306201 20000140 returned -22
[  253.750348] binder: 14481:14484 unknown command 1023
[  253.760375] binder: 14470:14482 BC_INCREFS_DONE u4000000000000000 no match
[  253.766096] binder: BINDER_SET_CONTEXT_MGR already set
[  253.768498] binder: 14470:14482 unknown command 1937009409
[  253.776126] binder: 14464:14486 ioctl c0306201 200001c0 returned -22
[  253.781672] binder: 14456:14478 unknown command 479
[  253.792645] binder: 14475:14490 ioctl 40046207 0 returned -16
[  253.799021] binder: 14481:14484 ioctl c0306201 20000140 returned -22
[  253.801797] binder: 14470:14482 ioctl c0306201 200002c0 returned -22
[  253.806405] binder: BINDER_SET_CONTEXT_MGR already set
[  253.818567] binder: 14470:14494 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.826606] binder: 14456:14478 ioctl c0306201 200001c0 returned -22
[  253.838317] binder: 14475:14477 unknown command 536871488
[  253.839919] binder: 14456:14459 unknown command 0
[  253.849593] binder: 14456:14459 ioctl c0306201 200003c0 returned -22
[  253.852276] binder: 14481:14484 unknown command 536871488
[  253.862304] binder: 14481:14491 ioctl 40046207 0 returned -16
[  253.877006] binder: 14475:14477 ioctl c0306201 20000440 returned -22
[  253.885945] binder: 14464:14465 unknown command 0
[  253.889744] binder: 14470:14494 unknown command 479
[  253.893359] binder: 14464:14465 ioctl c0306201 200003c0 returned -22
05:10:39 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.897138] binder: 14475:14490 BC_INCREFS_DONE u4000000000000000 no match
[  253.916127] binder: 14475:14490 unknown command 1937009409
[  253.920293] binder: 14481:14491 BC_INCREFS_DONE u4000000000000000 no match
[  253.922001] binder: 14470:14494 ioctl c0306201 200001c0 returned -22
[  253.933300] binder: 14481:14491 unknown command 1937009409
[  253.940503] binder: 14481:14484 ioctl c0306201 20000440 returned -22
[  253.947313] binder: 14489:14492 unknown command 1023
05:10:39 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  253.959797] binder: 14489:14492 ioctl c0306201 20000140 returned -22
[  253.961049] binder: 14475:14477 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.972436] binder: 14481:14491 ioctl c0306201 200002c0 returned -22
[  253.982064] binder: 14481:14498 Release 1 refcount change on invalid ref 985917153 ret -22
[  253.990513] binder: 14475:14490 ioctl c0306201 200002c0 returned -22
[  254.000148] binder: BINDER_SET_CONTEXT_MGR already set
[  254.012031] binder: 14489:14501 ioctl 40046207 0 returned -16
[  254.022923] binder: 14470:14472 unknown command 0
[  254.036148] binder: 14481:14498 unknown command 479
[  254.046549] binder: 14470:14472 ioctl c0306201 200003c0 returned -22
[  254.049660] binder: 14489:14492 unknown command 536871488
05:10:39 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  254.055025] binder: 14475:14477 unknown command 479
[  254.059182] binder: 14489:14492 ioctl c0306201 20000440 returned -22
[  254.073085] binder: 14475:14490 unknown command 0
[  254.095497] binder: 14475:14490 ioctl c0306201 200003c0 returned -22
[  254.095816] binder: 14475:14477 ioctl c0306201 200001c0 returned -22
05:10:39 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  254.106600] binder: 14481:14498 ioctl c0306201 200001c0 returned -22
[  254.119755] binder: 14489:14501 BC_INCREFS_DONE u4000000000000000 no match
[  254.134023] binder: 14489:14501 unknown command 1937009409
[  254.146315] binder: 14499:14505 unknown command 1023
[  254.157350] binder: 14499:14505 ioctl c0306201 20000140 returned -22
[  254.166582] binder: 14481:14491 unknown command 0
[  254.172328] binder: 14481:14491 ioctl c0306201 200003c0 returned -22
[  254.179345] binder: 14489:14492 Release 1 refcount change on invalid ref 985917153 ret -22
[  254.192440] binder: 14489:14492 unknown command 479
[  254.197915] binder: BINDER_SET_CONTEXT_MGR already set
[  254.199461] binder: 14504:14507 unknown command 1023
05:10:40 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  254.208876] binder: 14489:14501 ioctl c0306201 200002c0 returned -22
[  254.211114] binder: 14489:14492 ioctl c0306201 200001c0 returned -22
[  254.226890] binder: 14504:14507 ioctl c0306201 20000140 returned -22
[  254.227521] binder: 14499:14517 ioctl 40046207 0 returned -16
[  254.243815] binder: 14499:14505 unknown command 536871488
[  254.249504] binder: BINDER_SET_CONTEXT_MGR already set
[  254.254480] binder: 14510:14512 unknown command 1023
[  254.254900] binder: 14504:14513 ioctl 40046207 0 returned -16
[  254.263454] binder: 14510:14512 ioctl c0306201 20000140 returned -22
[  254.272990] binder: 14499:14505 ioctl c0306201 20000440 returned -22
[  254.277753] binder: BINDER_SET_CONTEXT_MGR already set
[  254.293655] binder: 14515:14518 unknown command 1023
[  254.295916] binder: 14504:14507 unknown command 536871488
[  254.299218] binder: 14515:14518 ioctl c0306201 20000140 returned -22
[  254.309896] binder: 14499:14524 BC_INCREFS_DONE u4000000000000000 no match
[  254.321881] binder: 14510:14512 ioctl 40046207 0 returned -16
[  254.322817] binder: 14504:14507 ioctl c0306201 20000440 returned -22
[  254.328252] binder: 14499:14524 unknown command 1937009409
[  254.342511] binder: BINDER_SET_CONTEXT_MGR already set
[  254.351604] binder: 14510:14526 unknown command 536871488
[  254.357491] binder: 14504:14513 BC_INCREFS_DONE u4000000000000000 no match
[  254.357569] binder: 14489:14492 unknown command 0
[  254.366459] binder: 14499:14505 Release 1 refcount change on invalid ref 985917153 ret -22
[  254.370203] binder: 14489:14492 ioctl c0306201 200003c0 returned -22
[  254.380111] binder: 14504:14513 unknown command 1937009409
[  254.385029] binder: 14515:14527 ioctl 40046207 0 returned -16
[  254.396272] binder: 14499:14524 ioctl c0306201 200002c0 returned -22
[  254.396372] binder: 14515:14518 unknown command 536871488
[  254.403591] binder: 14504:14528 Release 1 refcount change on invalid ref 985917153 ret -22
[  254.413893] binder: 14520:14523 unknown command 1023
[  254.417492] binder: 14504:14528 unknown command 479
[  254.432026] binder: 14510:14526 ioctl c0306201 20000440 returned -22
[  254.432231] binder: 14510:14512 BC_INCREFS_DONE u4000000000000000 no match
[  254.438725] binder: 14515:14518 ioctl c0306201 20000440 returned -22
[  254.448426] binder: 14504:14528 ioctl c0306201 200001c0 returned -22
[  254.457877] binder: 14499:14505 unknown command 479
[  254.459125] binder: 14515:14527 BC_INCREFS_DONE u4000000000000000 no match
[  254.468836] binder: 14504:14513 ioctl c0306201 200002c0 returned -22
[  254.473465] binder: BINDER_SET_CONTEXT_MGR already set
[  254.480120] binder: 14520:14523 ioctl c0306201 20000140 returned -22
[  254.489682] binder: 14510:14532 Release 1 refcount change on invalid ref 985917153 ret -22
[  254.493526] binder: 14515:14527 unknown command 1937009409
[  254.501679] binder: 14499:14517 unknown command 0
[  254.509039] binder: 14499:14517 ioctl c0306201 200003c0 returned -22
[  254.516128] binder: 14510:14512 unknown command 1937009409
[  254.516195] binder: 14499:14505 ioctl c0306201 200001c0 returned -22
[  254.525677] binder: 14515:14535 Release 1 refcount change on invalid ref 985917153 ret -22
[  254.536638] binder: 14510:14532 unknown command 479
[  254.542857] binder: 14520:14530 ioctl 40046207 0 returned -16
[  254.548759] binder: 14520:14523 unknown command 536871488
[  254.548817] binder: 14520:14523 ioctl c0306201 20000440 returned -22
05:10:40 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:40 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  254.567521] binder: 14510:14512 ioctl c0306201 200002c0 returned -22
[  254.588146] binder: 14510:14540 unknown command 0
[  254.593180] binder: 14515:14527 ioctl c0306201 200002c0 returned -22
[  254.593200] binder: 14510:14532 ioctl c0306201 200001c0 returned -22
[  254.606713] binder: 14515:14535 unknown command 479
[  254.619336] binder: 14520:14523 BC_INCREFS_DONE u4000000000000000 no match
[  254.634100] binder: 14510:14540 ioctl c0306201 200003c0 returned -22
[  254.643156] binder: 14515:14535 ioctl c0306201 200001c0 returned -22
[  254.663158] binder: 14504:14507 unknown command 0
05:10:40 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:40 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  254.668404] binder: 14504:14507 ioctl c0306201 200003c0 returned -22
[  254.673024] binder: 14520:14523 unknown command 1937009409
[  254.675117] binder: 14520:14530 Release 1 refcount change on invalid ref 985917153 ret -22
[  254.681771] binder: 14515:14518 unknown command 0
[  254.695754] binder: 14520:14530 unknown command 479
[  254.724058] binder: 14539:14545 unknown command 1023
[  254.731102] binder: 14520:14523 ioctl c0306201 200002c0 returned -22
[  254.733914] binder: 14520:14530 ioctl c0306201 200001c0 returned -22
[  254.742360] binder: 14515:14518 ioctl c0306201 200003c0 returned -22
[  254.748180] binder: 14539:14545 ioctl c0306201 20000140 returned -22
05:10:40 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  254.771605] binder: BINDER_SET_CONTEXT_MGR already set
[  254.779115] binder: 14520:14536 unknown command 0
[  254.780817] binder: 14544:14547 unknown command 1023
[  254.784557] binder: 14520:14536 ioctl c0306201 200003c0 returned -22
[  254.789756] binder: 14544:14547 ioctl c0306201 20000140 returned -22
[  254.816249] binder: 14539:14550 unknown command 536871488
[  254.822948] binder: 14539:14545 ioctl 40046207 0 returned -16
[  254.824249] binder: 14539:14550 ioctl c0306201 20000440 returned -22
[  254.842512] binder: BINDER_SET_CONTEXT_MGR already set
[  254.859192] binder: 14544:14547 ioctl 40046207 0 returned -16
[  254.869481] binder: 14539:14545 BC_INCREFS_DONE u4000000000000000 no match
[  254.882045] binder: 14544:14547 unknown command 536871488
[  254.889930] binder: 14552:14556 unknown command 1023
[  254.892490] binder: 14561:14563 unknown command 1023
[  254.900520] binder: 14544:14547 ioctl c0306201 20000440 returned -22
[  254.901401] binder: 14555:14558 unknown command 1023
[  254.907178] binder: 14561:14563 ioctl c0306201 20000140 returned -22
[  254.913676] binder: 14539:14545 unknown command 1937009409
05:10:40 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  254.924056] binder: 14539:14550 Release 1 refcount change on invalid ref 985917153 ret -22
[  254.933100] binder: 14544:14557 BC_INCREFS_DONE u4000000000000000 no match
[  254.933106] binder: 14552:14556 ioctl c0306201 20000140 returned -22
[  254.940746] binder: 14544:14557 unknown command 1937009409
[  254.948786] binder: BINDER_SET_CONTEXT_MGR already set
[  254.958069] binder: 14555:14558 ioctl c0306201 20000140 returned -22
[  254.960436] binder: 14539:14550 unknown command 479
[  254.971730] binder: 14555:14566 ioctl 40046207 0 returned -16
[  254.973696] binder: BINDER_SET_CONTEXT_MGR already set
[  254.977904] binder: 14539:14545 ioctl c0306201 200002c0 returned -22
[  254.987273] binder: 14544:14547 Release 1 refcount change on invalid ref 985917153 ret -22
[  254.998310] binder: 14555:14571 unknown command 536871488
[  255.001338] binder: 14544:14547 unknown command 479
[  255.005133] binder: 14552:14572 unknown command 536871488
[  255.010153] binder: 14561:14569 unknown command 536871488
[  255.024184] binder: 14539:14570 unknown command 0
[  255.024355] binder: 14544:14547 ioctl c0306201 200001c0 returned -22
[  255.029213] binder: 14539:14570 ioctl c0306201 200003c0 returned -22
[  255.036972] binder: BINDER_SET_CONTEXT_MGR already set
[  255.042493] binder: 14555:14571 ioctl c0306201 20000440 returned -22
[  255.047757] binder: 14552:14565 ioctl 40046207 0 returned -16
[  255.068055] binder: 14552:14556 BC_INCREFS_DONE u4000000000000000 no match
[  255.068435] binder: 14561:14563 BC_INCREFS_DONE u4000000000000000 no match
[  255.079121] binder: 14552:14556 unknown command 1937009409
[  255.083375] binder: 14561:14564 ioctl 40046207 0 returned -16
[  255.094959] binder: 14539:14550 ioctl c0306201 200001c0 returned -22
[  255.102735] binder: 14555:14558 BC_INCREFS_DONE u4000000000000000 no match
[  255.103128] binder: 14544:14557 ioctl c0306201 200002c0 returned -22
[  255.110001] binder: 14555:14558 unknown command 1937009409
[  255.113605] binder: 14552:14572 ioctl c0306201 20000440 returned -22
[  255.116893] binder: 14561:14569 ioctl c0306201 20000440 returned -22
[  255.129899] binder: 14544:14577 unknown command 0
[  255.142992] binder: 14552:14556 ioctl c0306201 200002c0 returned -22
[  255.151629] binder: 14552:14580 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.163969] binder: 14561:14563 unknown command 1937009409
[  255.175362] binder: 14544:14577 ioctl c0306201 200003c0 returned -22
[  255.179573] binder: 14555:14558 ioctl c0306201 200002c0 returned -22
[  255.188923] binder: 14561:14563 ioctl c0306201 200002c0 returned -22
[  255.201558] binder: 14561:14564 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.209312] binder: 14555:14566 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.216384] binder: 14561:14564 unknown command 479
05:10:41 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:41 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  255.218516] binder: 14555:14566 unknown command 479
[  255.218529] binder: 14555:14566 ioctl c0306201 200001c0 returned -22
[  255.233596] binder: 14552:14580 unknown command 479
[  255.246189] binder: 14567:14575 unknown command 1023
[  255.260214] binder: 14552:14580 ioctl c0306201 200001c0 returned -22
[  255.268181] binder: 14567:14575 ioctl c0306201 20000140 returned -22
05:10:41 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  255.291156] binder: BINDER_SET_CONTEXT_MGR already set
[  255.296602] binder: 14567:14582 ioctl 40046207 0 returned -16
[  255.305008] binder: 14561:14564 ioctl c0306201 200001c0 returned -22
[  255.310630] binder: 14555:14558 unknown command 0
[  255.316618] binder: 14555:14558 ioctl c0306201 200003c0 returned -22
[  255.321519] binder: 14561:14569 unknown command 0
[  255.328131] binder: 14561:14569 ioctl c0306201 200003c0 returned -22
05:10:41 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  255.345369] binder: 14567:14575 unknown command 536871488
[  255.349156] binder: 14583:14586 unknown command 1023
[  255.355112] binder: 14567:14575 ioctl c0306201 20000440 returned -22
[  255.365540] binder: 14583:14586 ioctl c0306201 20000140 returned -22
[  255.384053] binder: 14584:14587 unknown command 1023
[  255.396299] binder: 14567:14575 BC_INCREFS_DONE u4000000000000000 no match
[  255.399397] binder: BINDER_SET_CONTEXT_MGR already set
[  255.410473] binder: 14584:14587 ioctl c0306201 20000140 returned -22
[  255.414345] binder: 14552:14556 unknown command 0
[  255.421943] binder: 14583:14586 ioctl 40046207 0 returned -16
[  255.425947] binder: 14583:14586 unknown command 536871488
[  255.434836] binder: BINDER_SET_CONTEXT_MGR already set
[  255.436836] binder: 14567:14575 unknown command 1937009409
[  255.440774] binder: 14584:14594 ioctl 40046207 0 returned -16
[  255.442466] binder: 14584:14594 unknown command 536871488
[  255.447411] binder: 14567:14582 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.459796] binder: 14583:14586 ioctl c0306201 20000440 returned -22
[  255.475187] binder: 14552:14556 ioctl c0306201 200003c0 returned -22
[  255.478063] binder: 14583:14601 BC_INCREFS_DONE u4000000000000000 no match
05:10:41 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  255.492430] binder: 14584:14587 BC_INCREFS_DONE u4000000000000000 no match
[  255.499587] binder: 14584:14587 unknown command 1937009409
[  255.505032] binder: 14593:14595 unknown command 1023
[  255.510939] binder: 14584:14594 ioctl c0306201 20000440 returned -22
[  255.511097] binder: 14567:14575 ioctl c0306201 200002c0 returned -22
[  255.521632] binder: 14583:14606 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.537608] binder: 14593:14595 ioctl c0306201 20000140 returned -22
[  255.540665] binder: 14584:14587 ioctl c0306201 200002c0 returned -22
[  255.549705] binder: 14567:14582 unknown command 479
[  255.551474] binder: 14598:14600 unknown command 1023
[  255.559251] binder: 14567:14582 ioctl c0306201 200001c0 returned -22
[  255.562848] binder: 14567:14602 unknown command 0
[  255.568078] binder: BINDER_SET_CONTEXT_MGR already set
[  255.576740] binder: 14583:14601 unknown command 1937009409
[  255.583418] binder: 14584:14611 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.583913] binder: 14567:14602 ioctl c0306201 200003c0 returned -22
[  255.596670] binder: 14593:14610 ioctl 40046207 0 returned -16
[  255.607090] binder: BINDER_SET_CONTEXT_MGR already set
[  255.615575] binder: 14584:14611 unknown command 479
[  255.626175] binder: 14604:14608 unknown command 1023
[  255.626490] binder: 14598:14607 ioctl 40046207 0 returned -16
[  255.631622] binder: 14584:14611 ioctl c0306201 200001c0 returned -22
[  255.638551] binder: 14583:14606 unknown command 479
[  255.649993] binder: 14598:14600 ioctl c0306201 20000140 returned -22
[  255.651744] binder: 14604:14608 ioctl c0306201 20000140 returned -22
[  255.657151] binder: 14583:14601 ioctl c0306201 200002c0 returned -22
[  255.667029] binder: 14598:14617 unknown command 536871488
[  255.672217] binder: 14583:14586 unknown command 0
[  255.677455] binder: 14593:14595 unknown command 536871488
[  255.683023] binder: 14583:14606 ioctl c0306201 200001c0 returned -22
[  255.686166] binder: 14593:14595 ioctl c0306201 20000440 returned -22
[  255.703104] binder: BINDER_SET_CONTEXT_MGR already set
[  255.711517] binder: 14584:14587 unknown command 0
[  255.716633] binder: 14584:14587 ioctl c0306201 200003c0 returned -22
[  255.722036] binder: 14604:14619 ioctl 40046207 0 returned -16
[  255.723731] binder: 14598:14607 BC_INCREFS_DONE u4000000000000000 no match
[  255.729351] binder: 14604:14621 unknown command 536871488
05:10:41 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:41 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:41 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  255.736603] binder: 14583:14586 ioctl c0306201 200003c0 returned -22
[  255.744258] binder: 14598:14617 ioctl c0306201 20000440 returned -22
[  255.761686] binder: 14593:14595 BC_INCREFS_DONE u4000000000000000 no match
[  255.780537] binder: 14604:14619 BC_INCREFS_DONE u4000000000000000 no match
[  255.782623] binder: 14598:14607 unknown command 1937009409
[  255.804493] binder: 14598:14600 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.806820] binder: 14593:14595 unknown command 1937009409
[  255.831289] binder: 14598:14600 unknown command 479
[  255.832236] binder: 14604:14608 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.845296] binder: 14604:14619 unknown command 1937009409
[  255.851435] binder: 14593:14610 Release 1 refcount change on invalid ref 985917153 ret -22
[  255.859752] binder: 14598:14607 ioctl c0306201 200002c0 returned -22
[  255.869214] binder: 14593:14610 unknown command 479
[  255.873154] binder: 14598:14600 ioctl c0306201 200001c0 returned -22
[  255.874465] binder: 14593:14595 ioctl c0306201 200002c0 returned -22
[  255.889385] binder: 14604:14621 ioctl c0306201 20000440 returned -22
[  255.896511] binder: 14604:14619 ioctl c0306201 200002c0 returned -22
[  255.917357] binder: 14593:14610 ioctl c0306201 200001c0 returned -22
[  255.918302] binder: 14624:14629 unknown command 1023
[  255.924086] binder: 14604:14608 unknown command 479
[  255.924109] binder: 14604:14608 ioctl c0306201 200001c0 returned -22
[  255.939817] binder: 14598:14607 unknown command 0
[  255.945958] binder: 14623:14627 unknown command 1023
[  255.957842] binder: 14623:14627 ioctl c0306201 20000140 returned -22
[  255.967346] binder: 14598:14607 ioctl c0306201 200003c0 returned -22
[  255.970420] binder: BINDER_SET_CONTEXT_MGR already set
[  255.981859] binder: 14624:14629 ioctl c0306201 20000140 returned -22
[  255.990704] binder: 14628:14630 unknown command 1023
[  255.995878] binder: 14628:14630 ioctl c0306201 20000140 returned -22
[  256.002746] binder: 14623:14627 ioctl 40046207 0 returned -16
[  256.009369] binder: BINDER_SET_CONTEXT_MGR already set
05:10:41 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  256.016355] binder: 14623:14633 unknown command 536871488
[  256.022199] binder: 14623:14633 ioctl c0306201 20000440 returned -22
[  256.022698] binder: 14593:14595 unknown command 0
[  256.032091] binder: 14624:14637 ioctl 40046207 0 returned -16
[  256.037946] binder: 14624:14640 unknown command 536871488
[  256.040239] binder: BINDER_SET_CONTEXT_MGR already set
[  256.047505] binder: 14604:14608 unknown command 0
[  256.056519] binder: 14604:14608 ioctl c0306201 200003c0 returned -22
[  256.059556] binder: 14623:14627 BC_INCREFS_DONE u4000000000000000 no match
[  256.082651] binder: 14593:14595 ioctl c0306201 200003c0 returned -22
[  256.085039] binder: 14628:14643 ioctl 40046207 0 returned -16
[  256.098577] binder: 14628:14630 unknown command 536871488
[  256.104591] binder: 14623:14627 unknown command 1937009409
05:10:41 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:41 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  256.111066] binder: 14623:14633 Release 1 refcount change on invalid ref 985917153 ret -22
[  256.113682] binder: 14624:14640 ioctl c0306201 20000440 returned -22
[  256.121160] binder: 14628:14630 ioctl c0306201 20000440 returned -22
[  256.135220] binder: 14624:14629 BC_INCREFS_DONE u4000000000000000 no match
[  256.148319] binder: 14623:14633 unknown command 479
[  256.159810] binder: 14624:14629 unknown command 1937009409
[  256.159919] binder: 14628:14651 BC_INCREFS_DONE u4000000000000000 no match
[  256.166969] binder: 14642:14644 unknown command 1023
[  256.179080] binder: 14623:14627 ioctl c0306201 200002c0 returned -22
[  256.187880] binder: 14624:14637 Release 1 refcount change on invalid ref 985917153 ret -22
[  256.196560] binder: 14623:14633 ioctl c0306201 200001c0 returned -22
[  256.206336] binder: 14628:14656 Release 1 refcount change on invalid ref 985917153 ret -22
[  256.207801] binder: 14624:14629 ioctl c0306201 200002c0 returned -22
[  256.215175] binder: BINDER_SET_CONTEXT_MGR already set
[  256.224962] binder: 14642:14644 ioctl c0306201 20000140 returned -22
[  256.232585] binder: 14623:14652 unknown command 0
[  256.238257] binder: 14623:14652 ioctl c0306201 200003c0 returned -22
[  256.245805] binder: 14624:14637 unknown command 479
[  256.251323] binder: 14642:14648 ioctl 40046207 0 returned -16
[  256.257582] binder: 14628:14651 unknown command 1937009409
05:10:42 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  256.266757] binder: 14642:14661 unknown command 536871488
[  256.275928] binder: 14624:14637 ioctl c0306201 200001c0 returned -22
[  256.279583] binder: 14647:14653 unknown command 1023
[  256.284934] binder: 14628:14656 unknown command 479
[  256.297054] binder: 14628:14651 ioctl c0306201 200002c0 returned -22
[  256.299964] binder: 14650:14654 unknown command 1023
[  256.304569] binder: 14642:14661 ioctl c0306201 20000440 returned -22
[  256.328001] binder: BINDER_SET_CONTEXT_MGR already set
[  256.329266] binder: 14650:14654 ioctl c0306201 20000140 returned -22
[  256.333851] binder: 14628:14656 ioctl c0306201 200001c0 returned -22
[  256.342172] binder: 14642:14644 BC_INCREFS_DONE u4000000000000000 no match
[  256.355729] binder: BINDER_SET_CONTEXT_MGR already set
[  256.361391] binder: 14650:14660 ioctl 40046207 0 returned -16
[  256.366931] binder: 14647:14653 ioctl c0306201 20000140 returned -22
[  256.370230] binder: 14647:14667 ioctl 40046207 0 returned -16
[  256.385712] binder: 14647:14667 unknown command 536871488
[  256.389527] binder: 14624:14629 unknown command 0
[  256.391619] binder: 14642:14644 unknown command 1937009409
[  256.396799] binder: 14624:14629 ioctl c0306201 200003c0 returned -22
[  256.408143] binder: 14642:14648 Release 1 refcount change on invalid ref 985917153 ret -22
[  256.421960] binder: 14650:14660 unknown command 536871488
[  256.423831] binder: 14628:14630 unknown command 0
[  256.427983] binder: 14642:14648 unknown command 479
[  256.444267] binder: 14647:14653 BC_INCREFS_DONE u4000000000000000 no match
[  256.451736] binder: 14647:14667 ioctl c0306201 20000440 returned -22
[  256.454251] binder: 14628:14630 ioctl c0306201 200003c0 returned -22
[  256.467076] binder: 14650:14670 BC_INCREFS_DONE u4000000000000000 no match
05:10:42 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:42 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  256.468489] binder: 14663:14668 unknown command 1023
[  256.474641] binder: 14650:14660 ioctl c0306201 20000440 returned -22
[  256.490190] binder: 14647:14653 unknown command 1937009409
[  256.492622] binder: 14663:14668 ioctl c0306201 20000140 returned -22
[  256.497278] binder: 14642:14661 unknown command 0
[  256.507899] binder: 14647:14669 Release 1 refcount change on invalid ref 985917153 ret -22
[  256.513172] binder: BINDER_SET_CONTEXT_MGR already set
05:10:42 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  256.527525] binder: 14663:14672 ioctl 40046207 0 returned -16
[  256.534691] binder: 14650:14670 unknown command 1937009409
[  256.540779] binder: 14642:14648 ioctl c0306201 200001c0 returned -22
[  256.547602] binder: 14642:14661 ioctl c0306201 200003c0 returned -22
[  256.559537] binder: 14642:14644 ioctl c0306201 200002c0 returned -22
[  256.559708] binder: 14650:14654 Release 1 refcount change on invalid ref 985917153 ret -22
[  256.566362] binder: 14647:14669 unknown command 479
[  256.566374] binder: 14647:14669 ioctl c0306201 200001c0 returned -22
[  256.566441] binder: 14647:14653 ioctl c0306201 200002c0 returned -22
[  256.566534] binder: 14650:14670 ioctl c0306201 200002c0 returned -22
05:10:42 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  256.625211] binder: 14663:14668 unknown command 536871488
[  256.626300] binder: 14682:14683 unknown command 1023
[  256.633264] binder: 14663:14668 ioctl c0306201 20000440 returned -22
[  256.643428] binder: 14647:14653 unknown command 0
[  256.643487] binder: 14647:14653 ioctl c0306201 200003c0 returned -22
[  256.648645] binder: 14682:14683 ioctl c0306201 20000140 returned -22
[  256.653983] binder: BINDER_SET_CONTEXT_MGR already set
[  256.683709] binder: 14650:14670 unknown command 0
[  256.689772] binder: 14650:14670 ioctl c0306201 200003c0 returned -22
[  256.694808] binder: 14675:14681 unknown command 1023
[  256.709465] binder: 14682:14692 unknown command 536871488
[  256.719749] binder: 14663:14672 BC_INCREFS_DONE u4000000000000000 no match
[  256.725446] binder: 14682:14683 ioctl 40046207 0 returned -16
[  256.727489] binder: 14675:14681 ioctl c0306201 20000140 returned -22
[  256.738572] binder: 14678:14679 unknown command 1023
[  256.740610] binder: 14663:14672 unknown command 1937009409
[  256.749388] binder: BINDER_SET_CONTEXT_MGR already set
[  256.751182] binder: 14682:14692 ioctl c0306201 20000440 returned -22
[  256.759678] binder: 14682:14695 BC_INCREFS_DONE u4000000000000000 no match
[  256.763685] binder: 14650:14654 unknown command 479
[  256.772374] binder: 14678:14679 ioctl c0306201 20000140 returned -22
[  256.781551] binder: 14663:14672 ioctl c0306201 200002c0 returned -22
[  256.793630] binder: 14682:14695 unknown command 1937009409
[  256.794887] binder: 14675:14681 unknown command 536871488
[  256.801625] binder: BINDER_SET_CONTEXT_MGR already set
[  256.807428] binder: 14663:14668 Release 1 refcount change on invalid ref 985917153 ret -22
[  256.819917] binder: 14663:14668 unknown command 479
[  256.820172] binder: 14675:14694 ioctl 40046207 0 returned -16
[  256.825560] binder: 14663:14668 ioctl c0306201 200001c0 returned -22
[  256.834762] binder: 14690:14693 unknown command 1023
[  256.837725] binder: 14675:14681 ioctl c0306201 20000440 returned -22
[  256.842865] binder: 14678:14685 ioctl 40046207 0 returned -16
[  256.850119] binder: 14678:14696 unknown command 536871488
[  256.857498] binder: 14682:14683 Release 1 refcount change on invalid ref 985917153 ret -22
[  256.861695] binder: 14650:14654 ioctl c0306201 200001c0 returned -22
[  256.869614] binder: 14682:14683 unknown command 479
[  256.877092] binder: 14675:14697 BC_INCREFS_DONE u4000000000000000 no match
[  256.881738] binder: 14682:14695 ioctl c0306201 200002c0 returned -22
[  256.892680] binder: 14675:14697 unknown command 1937009409
[  256.895040] binder: BINDER_SET_CONTEXT_MGR already set
[  256.906059] binder: 14690:14693 ioctl c0306201 20000140 returned -22
[  256.912933] binder: 14690:14699 ioctl 40046207 0 returned -16
[  256.919232] binder: 14682:14683 ioctl c0306201 200001c0 returned -22
[  256.921489] binder: 14678:14700 BC_INCREFS_DONE u4000000000000000 no match
[  256.936356] binder: 14678:14696 ioctl c0306201 20000440 returned -22
[  256.945103] binder: 14690:14693 unknown command 536871488
[  256.952074] binder: 14690:14693 ioctl c0306201 20000440 returned -22
[  256.958078] binder: 14663:14668 unknown command 0
[  256.969947] binder: 14690:14693 BC_INCREFS_DONE u4000000000000000 no match
[  256.970492] binder: 14675:14697 ioctl c0306201 200002c0 returned -22
05:10:42 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:42 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  256.986989] binder: 14690:14693 unknown command 1937009409
[  256.993034] binder: 14663:14668 ioctl c0306201 200003c0 returned -22
[  257.004300] binder: 14678:14700 unknown command 1937009409
[  257.005485] binder: 14690:14693 ioctl c0306201 200002c0 returned -22
[  257.016809] binder: 14690:14699 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.027245] binder: 14675:14681 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.032032] binder: 14690:14699 unknown command 479
[  257.036055] binder: 14678:14700 ioctl c0306201 200002c0 returned -22
[  257.050472] binder: 14682:14683 unknown command 0
[  257.054867] binder: 14675:14681 unknown command 479
[  257.055701] binder: 14678:14679 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.067892] binder: 14675:14681 ioctl c0306201 200001c0 returned -22
05:10:42 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  257.082005] binder: 14682:14683 ioctl c0306201 200003c0 returned -22
[  257.095943] binder: 14690:14710 unknown command 0
[  257.114746] binder: 14690:14699 ioctl c0306201 200001c0 returned -22
[  257.119736] binder: 14690:14710 ioctl c0306201 200003c0 returned -22
[  257.129172] binder: 14678:14679 unknown command 479
05:10:42 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  257.147978] binder: 14706:14709 unknown command 1023
[  257.157169] binder: 14678:14679 ioctl c0306201 200001c0 returned -22
[  257.178252] binder: 14704:14707 unknown command 1023
[  257.179210] binder: 14706:14709 ioctl c0306201 20000140 returned -22
[  257.192320] binder: 14678:14685 unknown command 0
[  257.196461] binder: 14704:14707 ioctl c0306201 20000140 returned -22
[  257.197542] binder: 14678:14685 ioctl c0306201 200003c0 returned -22
[  257.205295] binder: 14675:14694 unknown command 0
[  257.215710] binder: 14675:14694 ioctl c0306201 200003c0 returned -22
[  257.225118] binder: BINDER_SET_CONTEXT_MGR already set
05:10:43 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:43 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  257.249684] binder: 14706:14726 unknown command 536871488
[  257.249759] binder: 14714:14716 unknown command 1023
[  257.256839] binder: 14706:14726 ioctl c0306201 20000440 returned -22
[  257.274065] binder: 14704:14707 unknown command 536871488
[  257.286035] binder: 14704:14707 ioctl c0306201 20000440 returned -22
[  257.298043] binder: BINDER_SET_CONTEXT_MGR already set
[  257.298281] binder: 14714:14716 ioctl c0306201 20000140 returned -22
[  257.304482] binder: BINDER_SET_CONTEXT_MGR already set
[  257.313540] binder: 14719:14721 unknown command 1023
[  257.316315] binder: 14704:14724 ioctl 40046207 0 returned -16
[  257.321634] binder: 14704:14727 BC_INCREFS_DONE u4000000000000000 no match
[  257.327410] binder: 14706:14722 ioctl 40046207 0 returned -16
[  257.334197] binder: 14719:14721 ioctl c0306201 20000140 returned -22
[  257.349362] binder: 14704:14727 unknown command 1937009409
[  257.350279] binder: 14706:14709 BC_INCREFS_DONE u4000000000000000 no match
[  257.355275] binder: 14714:14725 ioctl 40046207 0 returned -16
[  257.371722] binder: 14704:14707 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.374508] binder: BINDER_SET_CONTEXT_MGR already set
[  257.380547] binder: 14714:14730 unknown command 536871488
[  257.391659] binder: 14704:14707 unknown command 479
[  257.393860] binder: 14706:14709 unknown command 1937009409
[  257.396791] binder: 14704:14707 ioctl c0306201 200001c0 returned -22
[  257.409228] binder: 14704:14727 ioctl c0306201 200002c0 returned -22
[  257.416485] binder: 14719:14736 unknown command 536871488
[  257.417686] binder: 14706:14722 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.422279] binder: 14714:14730 ioctl c0306201 20000440 returned -22
[  257.435520] binder: 14719:14734 ioctl 40046207 0 returned -16
[  257.448900] binder: 14714:14716 BC_INCREFS_DONE u4000000000000000 no match
[  257.452364] binder: 14706:14709 ioctl c0306201 200002c0 returned -22
[  257.459489] binder: 14714:14716 unknown command 1937009409
[  257.469001] binder: 14706:14722 unknown command 479
[  257.470332] binder: 14719:14736 ioctl c0306201 20000440 returned -22
[  257.479837] binder: 14729:14732 unknown command 1023
[  257.485214] binder: 14714:14716 ioctl c0306201 200002c0 returned -22
[  257.489179] binder: 14706:14722 ioctl c0306201 200001c0 returned -22
[  257.509483] binder: 14729:14732 ioctl c0306201 20000140 returned -22
[  257.518340] binder: 14706:14726 unknown command 0
[  257.524993] binder: 14706:14726 ioctl c0306201 200003c0 returned -22
[  257.541287] binder: BINDER_SET_CONTEXT_MGR already set
[  257.548456] binder: 14733:14735 unknown command 1023
[  257.554914] binder: 14704:14707 unknown command 0
05:10:43 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  257.555359] binder: 14733:14735 ioctl c0306201 20000140 returned -22
[  257.559953] binder: 14704:14707 ioctl c0306201 200003c0 returned -22
[  257.574704] binder: 14729:14732 unknown command 536871488
[  257.577465] binder: 14719:14721 BC_INCREFS_DONE u4000000000000000 no match
[  257.588569] binder: 14729:14740 ioctl 40046207 0 returned -16
[  257.594975] binder: 14729:14732 ioctl c0306201 20000440 returned -22
[  257.598356] binder: 14719:14721 unknown command 1937009409
[  257.603278] binder: BINDER_SET_CONTEXT_MGR already set
[  257.611275] binder: 14719:14721 ioctl c0306201 200002c0 returned -22
[  257.626298] binder: 14714:14716 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.631977] binder: 14729:14732 BC_INCREFS_DONE u4000000000000000 no match
[  257.640193] binder: 14719:14734 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.643019] binder: 14733:14735 ioctl 40046207 0 returned -16
05:10:43 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  257.656838] binder: 14714:14716 unknown command 479
[  257.657849] binder: 14733:14745 unknown command 536871488
[  257.668555] binder: 14733:14745 ioctl c0306201 20000440 returned -22
[  257.674497] binder: 14719:14734 unknown command 479
[  257.675973] binder: 14729:14732 unknown command 1937009409
[  257.689476] binder: 14729:14740 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.696188] binder: 14729:14732 ioctl c0306201 200002c0 returned -22
[  257.709922] binder: 14714:14716 ioctl c0306201 200001c0 returned -22
[  257.720851] binder: 14719:14734 ioctl c0306201 200001c0 returned -22
[  257.727235] binder: 14729:14740 unknown command 479
[  257.729937] binder: 14743:14744 unknown command 1023
[  257.740920] binder: 14743:14744 ioctl c0306201 20000140 returned -22
[  257.743070] binder: 14733:14735 BC_INCREFS_DONE u4000000000000000 no match
[  257.755703] binder: 14714:14716 unknown command 0
[  257.771814] binder: 14729:14740 ioctl c0306201 200001c0 returned -22
[  257.778365] binder: 14719:14721 unknown command 0
[  257.778404] binder: 14719:14721 ioctl c0306201 200003c0 returned -22
[  257.790556] binder: 14714:14716 ioctl c0306201 200003c0 returned -22
[  257.797228] binder: BINDER_SET_CONTEXT_MGR already set
[  257.798149] binder: 14733:14735 unknown command 1937009409
[  257.809735] binder: 14743:14754 ioctl 40046207 0 returned -16
05:10:43 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:43 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  257.809999] binder: 14733:14745 Release 1 refcount change on invalid ref 985917153 ret -22
[  257.842429] binder: 14729:14732 unknown command 0
[  257.842743] binder: 14743:14744 unknown command 536871488
[  257.847583] binder: 14729:14732 ioctl c0306201 200003c0 returned -22
[  257.868949] binder: 14743:14744 ioctl c0306201 20000440 returned -22
[  257.869428] binder: 14733:14735 ioctl c0306201 200002c0 returned -22
[  257.888493] binder: 14747:14760 unknown command 1023
[  257.895627] binder: 14733:14745 unknown command 479
[  257.899117] binder: 14743:14754 BC_INCREFS_DONE u4000000000000000 no match
[  257.901177] binder: 14747:14760 ioctl c0306201 20000140 returned -22
[  257.907875] binder: 14743:14754 unknown command 1937009409
[  257.907887] binder: 14743:14754 ioctl c0306201 200002c0 returned -22
[  257.919512] binder: 14743:14754 Release 1 refcount change on invalid ref 985917153 ret -22
05:10:43 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  257.921192] binder: 14733:14745 ioctl c0306201 200001c0 returned -22
[  257.929531] binder: 14733:14762 unknown command 0
[  257.941973] binder: BINDER_SET_CONTEXT_MGR already set
[  257.955558] binder: 14747:14749 ioctl 40046207 0 returned -16
[  257.967214] binder: 14743:14754 unknown command 479
[  257.967449] binder: 14747:14749 unknown command 536871488
[  257.983896] binder: 14747:14749 ioctl c0306201 20000440 returned -22
[  258.009294] binder: 14743:14744 unknown command 0
[  258.018633] binder: 14743:14754 ioctl c0306201 200001c0 returned -22
[  258.022383] binder: 14747:14749 BC_INCREFS_DONE u4000000000000000 no match
[  258.030456] binder: 14733:14762 ioctl c0306201 200003c0 returned -22
[  258.042187] binder: 14747:14749 unknown command 1937009409
[  258.044217] binder: 14758:14764 unknown command 1023
[  258.052133] binder: 14743:14744 ioctl c0306201 200003c0 returned -22
05:10:43 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  258.054719] binder: 14758:14764 ioctl c0306201 20000140 returned -22
[  258.078275] binder: BINDER_SET_CONTEXT_MGR already set
[  258.079243] binder: 14747:14760 Release 1 refcount change on invalid ref 985917153 ret -22
[  258.094091] binder: 14758:14764 ioctl 40046207 0 returned -16
[  258.094665] binder: 14747:14749 ioctl c0306201 200002c0 returned -22
05:10:43 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:43 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  258.111268] binder: 14747:14760 unknown command 479
[  258.117469] binder: 14758:14764 unknown command 536871488
[  258.122293] binder: 14747:14760 ioctl c0306201 200001c0 returned -22
[  258.133522] binder: 14772:14774 unknown command 1023
[  258.148198] binder: 14772:14774 ioctl c0306201 20000140 returned -22
[  258.163101] binder: 14758:14768 BC_INCREFS_DONE u4000000000000000 no match
[  258.172698] binder: 14758:14764 ioctl c0306201 20000440 returned -22
[  258.178932] binder: 14747:14749 unknown command 0
[  258.179587] binder: BINDER_SET_CONTEXT_MGR already set
[  258.190267] binder: 14772:14778 ioctl 40046207 0 returned -16
[  258.201103] binder: 14747:14749 ioctl c0306201 200003c0 returned -22
[  258.202002] binder: 14758:14768 unknown command 1937009409
[  258.225720] binder: 14758:14788 Release 1 refcount change on invalid ref 985917153 ret -22
[  258.227061] binder: 14776:14777 unknown command 1023
[  258.241787] binder: 14772:14774 unknown command 536871488
[  258.247598] binder: 14772:14774 ioctl c0306201 20000440 returned -22
[  258.254815] binder: 14758:14768 ioctl c0306201 200002c0 returned -22
[  258.261645] binder: 14758:14788 unknown command 479
[  258.266198] binder: 14776:14777 ioctl c0306201 20000140 returned -22
05:10:44 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

05:10:44 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  258.273510] binder: BINDER_SET_CONTEXT_MGR already set
[  258.276547] binder: 14772:14774 BC_INCREFS_DONE u4000000000000000 no match
[  258.279025] binder: 14776:14787 ioctl 40046207 0 returned -16
[  258.305603] binder: 14758:14788 ioctl c0306201 200001c0 returned -22
[  258.311293] binder: 14758:14764 unknown command 0
[  258.317521] binder: 14758:14764 ioctl c0306201 200003c0 returned -22
[  258.333121] binder: 14772:14778 Release 1 refcount change on invalid ref 985917153 ret -22
[  258.345798] binder: 14776:14777 unknown command 536871488
[  258.357641] binder: 14782:14784 unknown command 1023
[  258.366805] binder: 14772:14774 unknown command 1937009409
[  258.372655] binder: 14772:14778 unknown command 479
05:10:44 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  258.379389] binder: 14776:14777 ioctl c0306201 20000440 returned -22
[  258.386816] binder: 14772:14778 ioctl c0306201 200001c0 returned -22
[  258.403142] binder: BINDER_SET_CONTEXT_MGR already set
[  258.408667] binder: 14782:14793 ioctl 40046207 0 returned -16
[  258.411055] binder: 14772:14800 unknown command 0
[  258.419715] binder: 14782:14784 ioctl c0306201 20000140 returned -22
[  258.420213] binder: 14776:14787 BC_INCREFS_DONE u4000000000000000 no match
[  258.427284] binder: 14772:14774 ioctl c0306201 200002c0 returned -22
[  258.438417] binder: 14794:14799 unknown command 1023
[  258.446204] binder: 14782:14793 unknown command 536871488
[  258.451310] binder: 14772:14800 ioctl c0306201 200003c0 returned -22
[  258.452308] binder: 14782:14793 ioctl c0306201 20000440 returned -22
[  258.468423] binder: 14776:14777 Release 1 refcount change on invalid ref 985917153 ret -22
[  258.468523] binder: 14794:14799 ioctl c0306201 20000140 returned -22
05:10:44 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

05:10:44 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  258.480894] binder: 14776:14777 unknown command 479
[  258.489891] binder: 14776:14787 unknown command 1937009409
[  258.499414] binder: 14782:14784 BC_INCREFS_DONE u4000000000000000 no match
[  258.501325] binder: BINDER_SET_CONTEXT_MGR already set
[  258.507980] binder: 14782:14784 unknown command 1937009409
[  258.520213] binder: 14776:14777 ioctl c0306201 200001c0 returned -22
[  258.538450] binder: 14782:14784 ioctl c0306201 200002c0 returned -22
[  258.545320] binder: 14776:14787 ioctl c0306201 200002c0 returned -22
[  258.550519] binder: 14794:14799 unknown command 536871488
[  258.557851] binder: 14782:14793 Release 1 refcount change on invalid ref 985917153 ret -22
[  258.559823] binder: 14794:14799 ioctl c0306201 20000440 returned -22
[  258.578459] binder: 14804:14806 unknown command 1023
[  258.591527] binder: 14794:14808 ioctl 40046207 0 returned -16
[  258.593294] binder: 14776:14777 unknown command 0
[  258.606085] binder: 14782:14793 unknown command 479
[  258.616258] binder: 14804:14806 ioctl c0306201 20000140 returned -22
[  258.624083] binder: BINDER_SET_CONTEXT_MGR already set
[  258.629517] binder: 14804:14815 ioctl 40046207 0 returned -16
[  258.635135] binder: 14794:14808 BC_INCREFS_DONE u4000000000000000 no match
[  258.637837] binder: 14782:14793 ioctl c0306201 200001c0 returned -22
[  258.646468] binder: 14813:14818 unknown command 1023
[  258.651401] binder: 14776:14777 ioctl c0306201 200003c0 returned -22
[  258.656296] binder: 14794:14808 unknown command 1937009409
[  258.672363] binder: 14794:14808 ioctl c0306201 200002c0 returned -22
[  258.673397] binder: 14782:14784 unknown command 0
[  258.685217] binder: 14813:14818 ioctl c0306201 20000140 returned -22
05:10:44 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  258.686662] binder: 14782:14784 ioctl c0306201 200003c0 returned -22
[  258.699154] binder: 14804:14806 unknown command 536871488
[  258.699394] binder: 14794:14799 Release 1 refcount change on invalid ref 985917153 ret -22
[  258.705118] binder: 14804:14806 ioctl c0306201 20000440 returned -22
[  258.714526] binder: 14794:14799 unknown command 479
[  258.720992] binder: BINDER_SET_CONTEXT_MGR already set
[  258.728601] binder: 14794:14799 ioctl c0306201 200001c0 returned -22
05:10:44 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

05:10:44 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  258.742247] binder: 14804:14815 BC_INCREFS_DONE u4000000000000000 no match
[  258.749530] binder: 14804:14815 unknown command 1937009409
[  258.756309] binder: 14804:14815 ioctl c0306201 200002c0 returned -22
[  258.765700] binder: 14813:14818 unknown command 536871488
[  258.770208] binder: 14813:14826 ioctl 40046207 0 returned -16
[  258.775865] binder: 14813:14818 ioctl c0306201 20000440 returned -22
[  258.824980] binder: 14804:14806 Release 1 refcount change on invalid ref 985917153 ret -22
[  258.833739] binder: 14813:14826 BC_INCREFS_DONE u4000000000000000 no match
[  258.849133] binder: 14813:14826 unknown command 1937009409
[  258.852607] binder: 14794:14799 unknown command 0
[  258.860279] binder: 14794:14799 ioctl c0306201 200003c0 returned -22
[  258.860792] binder: 14813:14826 ioctl c0306201 200002c0 returned -22
05:10:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  258.867021] binder: 14804:14806 unknown command 479
[  258.884011] binder: 14813:14818 Release 1 refcount change on invalid ref 985917153 ret -22
[  258.893991] binder: 14835:14838 unknown command 1023
[  258.899442] binder: 14813:14818 unknown command 479
[  258.899896] binder: 14835:14838 ioctl c0306201 20000140 returned -22
[  258.918180] binder: 14804:14806 ioctl c0306201 200001c0 returned -22
05:10:44 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

05:10:44 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4)
getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8)
getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r4, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8)
getgroups(0x7, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01])
getresuid(&(0x7f0000000880), &(0x7f0000000840), &(0x7f0000000640))
stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700))
gettid()
fstat(r2, &(0x7f0000003780))
stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840))
getpgid(0x0)
getuid()
getgid()
getpgid(0xffffffffffffffff)
geteuid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003940))
getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00))
getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003e40))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003f80)=0xe8)
lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000))
sendmmsg$unix(r1, &(0x7f0000004140)=[{&(0x7f0000003c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d40)="d96fbfcb1e0679e4ccdf5c74c4dacce7df24d4659f869b43de36e34caaaafe151ea77e9503023f99354b0e2ff988bcad28ac928a04104b1b718ab788fcd1882b7f789c40292c6af0c0029aaae956e4aa728f60e23b3c87cf063a1a76c499da8371029fc752bec706f60728ff9d39519034474fc632b76a5e9e12366a715194a65f1f4d85268d7d80f3168d2b931df6ead1a2dc85a9da7c9dce00474568eb2ffecca1f8cfa047c479fd972cb0f8a0eaee5de23c1a0fef01eb7979", 0xba}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x4000040)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r4, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r5 = creat(&(0x7f0000000580)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r6 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r7, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="ff0300001562c5d43caf9ca3653b"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x7d, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0863104000000000000000400000000000000000016b74738410b72dcb247e7229360ade7788da648065b337036023b3dc0086adc8640c06c5598ea4e3cc0b301a6f42a641aecb346e7196ad6630eace1e9d32c4088b2bb75550c465eadfe7d59a04784c09a5caaa3d2649fae843af40e5bf3b832f464e64fb1a0c34f8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06630440e1e6c33adf01000000"], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  258.929646] binder: 14813:14818 ioctl c0306201 200001c0 returned -22
[  258.934435] binder: 14804:14815 unknown command 0
[  258.945679] binder: BINDER_SET_CONTEXT_MGR already set
[  258.952918] binder: 14804:14815 ioctl c0306201 200003c0 returned -22
[  258.967306] binder: 14835:14838 ioctl 40046207 0 returned -16
05:10:44 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  258.989299] binder: 14835:14838 unknown command 536871488
[  258.996016] binder: 14813:14818 unknown command 0
[  259.003396] binder: 14835:14838 ioctl c0306201 20000440 returned -22
[  259.012825] binder: 14813:14818 ioctl c0306201 200003c0 returned -22
[  259.027160] binder: 14835:14838 BC_INCREFS_DONE u4000000000000000 no match
05:10:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  259.054365] binder: 14835:14838 unknown command 1937009409
[  259.068708] binder: 14853:14855 unknown command 1023
[  259.074911] binder: 14835:14838 ioctl c0306201 200002c0 returned -22
[  259.075556] binder: 14835:14865 Release 1 refcount change on invalid ref 985917153 ret -22
[  259.083005] binder: 14853:14855 ioctl c0306201 20000140 returned -22
05:10:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

05:10:44 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  259.101880] binder: 14835:14865 unknown command 479
[  259.107150] binder: 14835:14865 ioctl c0306201 200001c0 returned -22
[  259.118411] binder: BINDER_SET_CONTEXT_MGR already set
[  259.126824] binder: 14853:14867 ioctl 40046207 0 returned -16
05:10:44 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  259.164374] binder: 14853:14855 unknown command 536871488
[  259.172919] binder: 14853:14855 ioctl c0306201 20000440 returned -22
[  259.182900] binder: 14853:14855 BC_INCREFS_DONE u4000000000000000 no match
[  259.191589] binder: 14853:14855 unknown command 1937009409
[  259.192905] binder: 14835:14838 unknown command 0
[  259.197331] binder: 14853:14855 ioctl c0306201 200002c0 returned -22
05:10:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

05:10:45 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:45 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

[  259.218440] binder: 14835:14838 ioctl c0306201 200003c0 returned -22
[  259.225109] binder: 14853:14855 Release 1 refcount change on invalid ref 985917153 ret -22
[  259.240270] binder: 14853:14855 unknown command 479
[  259.245500] binder: 14853:14855 ioctl c0306201 200001c0 returned -22
05:10:45 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:45 executing program 4:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)

05:10:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0207000010000000eeffa521000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000ec268b54a80080040000f01f0000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

05:10:45 executing program 4:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)

[  259.317533] binder: 14853:14867 unknown command 0
[  259.324124] binder: 14853:14867 ioctl c0306201 200003c0 returned -22
05:10:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4602706a5ce1a2ee467d3bca22f507643a066104010000000000000c02040000000000a6d10000030007000200ffffffff468051e57464030000000300000000000100bc0800000002000000000000000000ffff7f0000000000000600000000000000000800000000000005000092ac0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae37c7f0e87b4c"], 0xc9)
shutdown(r0, 0x1)

05:10:45 executing program 4:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)

05:10:45 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:45 executing program 1:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:45 executing program 4:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)

05:10:45 executing program 1:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:45 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:45 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:45 executing program 1:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:45 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:45 executing program 3:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0207000010000000eeffa521000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000ec268b54a80080040000f01f0000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

05:10:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:45 executing program 3:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:45 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:45 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:46 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
fcntl$setlease(r0, 0x400, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

05:10:46 executing program 3:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:46 executing program 0:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:46 executing program 3:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:46 executing program 4:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0207000010000000eeffa521000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000ec268b54a80080040000f01f0000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

05:10:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:46 executing program 4:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:46 executing program 0:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:46 executing program 4:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:46 executing program 0:
r0 = epoll_create(0x10001)
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001a40))

05:10:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0207000010000000eeffa521000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000ec268b54a80080040000f01f0000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

05:10:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:48 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:50 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1, 0x80}, 0x20)

05:10:50 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1, 0x80}, 0x20)

05:10:50 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1, 0x80}, 0x20)

05:10:50 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1, 0x80}, 0x20)

05:10:50 executing program 0:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x141})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

05:10:50 executing program 0:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x141})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

05:10:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:50 executing program 4:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x141})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

05:10:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

05:10:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

05:10:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

05:10:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

05:10:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

05:10:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

05:10:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x12040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x3}, 0x1, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x1f})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000140), 0xffffff35)

[  266.977850] ==================================================================
[  266.985332] BUG: KASAN: use-after-free in perf_output_read+0xe58/0xfc0
[  266.991981] Read of size 8 at addr ffff8881d20d9508 by task syz-executor.3/15428
[  266.999506] 
[  267.001123] CPU: 0 PID: 15428 Comm: syz-executor.3 Not tainted 4.14.127+ #9
[  267.008200] Call Trace:
[  267.010775]  dump_stack+0xb9/0x10e
[  267.014298]  ? perf_output_read+0xe58/0xfc0
[  267.018604]  print_address_description+0x60/0x226
[  267.023429]  ? perf_output_read+0xe58/0xfc0
[  267.027749]  kasan_report.cold+0xae/0x2d5
[  267.031973]  ? perf_output_read+0xe58/0xfc0
[  267.036289]  ? perf_event_exit_cpu_context+0x170/0x170
[  267.041550]  ? deref_stack_reg+0xaa/0xe0
[  267.045607]  ? perf_output_copy+0x149/0x1d0
[  267.049917]  ? perf_output_sample+0xcea/0x1700
[  267.054503]  ? HARDIRQ_verbose+0x10/0x10
[  267.058547]  ? __perf_event_header__init_id.isra.0+0x276/0x430
[  267.064509]  ? check_preemption_disabled+0x35/0x1f0
[  267.069510]  ? perf_prepare_sample+0x656/0x1330
[  267.074165]  ? perf_event__output_id_sample+0x70/0x70
[  267.079336]  ? perf_output_sample+0x1700/0x1700
[  267.083990]  ? lock_acquire+0x10f/0x380
[  267.087948]  ? perf_prepare_sample+0x1330/0x1330
[  267.092784]  ? perf_event_output_forward+0x10b/0x220
[  267.099487]  ? perf_prepare_sample+0x1330/0x1330
[  267.104334]  ? check_preemption_disabled+0x35/0x1f0
[  267.109342]  ? __perf_event_overflow+0x116/0x320
[  267.114091]  ? perf_swevent_overflow+0x17b/0x210
[  267.118833]  ? ___perf_sw_event+0x11b/0x4a0
[  267.123140]  ? perf_swevent_event+0x19c/0x270
[  267.127621]  ? ___perf_sw_event+0x2a4/0x4a0
[  267.131932]  ? perf_trace_lock_acquire+0x122/0x4e0
[  267.136849]  ? perf_pending_event+0xd0/0xd0
[  267.141154]  ? HARDIRQ_verbose+0x10/0x10
[  267.145205]  ? __handle_mm_fault+0xd96/0x2640
[  267.149684]  ? lock_downgrade+0x5d0/0x5d0
[  267.153825]  ? __handle_mm_fault+0xcc0/0x2640
[  267.158311]  ? _raw_spin_unlock+0x29/0x40
[  267.162454]  ? __handle_mm_fault+0x6c5/0x2640
[  267.166940]  ? vm_insert_mixed_mkwrite+0x30/0x30
[  267.171695]  ? HARDIRQ_verbose+0x10/0x10
[  267.175742]  ? HARDIRQ_verbose+0x10/0x10
[  267.179796]  ? __do_page_fault+0x48e/0xb80
[  267.184020]  ? __perf_sw_event+0x42/0x80
[  267.188070]  ? __perf_sw_event+0x42/0x80
[  267.192120]  ? __do_page_fault+0x785/0xb80
[  267.196343]  ? bad_area_access_error+0x340/0x340
[  267.201081]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  267.206016]  ? page_fault+0x22/0x50
[  267.209640]  ? iov_iter_fault_in_readable+0x29c/0x350
[  267.214919]  ? iov_iter_init+0x1c0/0x1c0
[  267.218975]  ? generic_perform_write+0x158/0x450
[  267.223733]  ? filemap_page_mkwrite+0x2d0/0x2d0
[  267.228385]  ? current_time+0xb0/0xb0
[  267.232171]  ? lock_acquire+0x10f/0x380
[  267.236131]  ? __generic_file_write_iter+0x32e/0x550
[  267.241214]  ? generic_write_checks+0x252/0x410
[  267.245878]  ? ext4_file_write_iter+0x551/0xd60
[  267.250546]  ? ext4_llseek+0x7f0/0x7f0
[  267.254433]  ? __vfs_write+0x401/0x5a0
[  267.258321]  ? HARDIRQ_verbose+0x10/0x10
[  267.262362]  ? kernel_read+0x110/0x110
[  267.266248]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  267.271684]  ? rcu_read_lock_sched_held+0x10a/0x130
[  267.276775]  ? vfs_write+0x17f/0x4d0
[  267.280477]  ? SyS_write+0x102/0x250
[  267.284175]  ? SyS_read+0x250/0x250
[  267.287783]  ? do_clock_gettime+0xd0/0xd0
[  267.291917]  ? do_syscall_64+0x43/0x510
[  267.295871]  ? SyS_read+0x250/0x250
[  267.299479]  ? do_syscall_64+0x19b/0x510
[  267.303530]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  267.308885] 
[  267.310493] Allocated by task 15416:
[  267.314275]  kasan_kmalloc.part.0+0x4f/0xd0
[  267.318584]  __kmalloc+0x143/0x340
[  267.322104]  load_elf_phdrs+0x118/0x1b0
[  267.326066]  load_elf_binary+0x7dc/0x4530
[  267.330192]  search_binary_handler+0x13f/0x6d0
[  267.334761]  do_execveat_common.isra.0+0xf5f/0x1c30
[  267.339757]  SyS_execve+0x34/0x40
[  267.343189]  do_syscall_64+0x19b/0x510
[  267.347138] 
[  267.348745] Freed by task 15416:
[  267.352092]  kasan_slab_free+0xb0/0x190
[  267.356044]  kfree+0xf5/0x310
[  267.359141]  load_elf_binary+0x1bf2/0x4530
[  267.363379]  search_binary_handler+0x13f/0x6d0
[  267.367950]  do_execveat_common.isra.0+0xf5f/0x1c30
[  267.372943]  SyS_execve+0x34/0x40
[  267.376377]  do_syscall_64+0x19b/0x510
[  267.380240] 
[  267.381850] The buggy address belongs to the object at ffff8881d20d9400
[  267.381850]  which belongs to the cache kmalloc-512 of size 512
[  267.394571] The buggy address is located 264 bytes inside of
[  267.394571]  512-byte region [ffff8881d20d9400, ffff8881d20d9600)
[  267.406518] The buggy address belongs to the page:
[  267.411439] page:ffffea0007483600 count:1 mapcount:0 mapping:          (null) index:0x0 compound_mapcount: 0
[  267.421389] flags: 0x4000000000010200(slab|head)
[  267.426224] raw: 4000000000010200 0000000000000000 0000000000000000 00000001000c000c
[  267.434086] raw: ffffea0007069780 0000000300000003 ffff8881d6402c00 0000000000000000
[  267.441955] page dumped because: kasan: bad access detected
[  267.447639] 
[  267.449247] Memory state around the buggy address:
[  267.454155]  ffff8881d20d9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.461493]  ffff8881d20d9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.468830] >ffff8881d20d9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.476175]                       ^
[  267.479780]  ffff8881d20d9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  267.487215]  ffff8881d20d9600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  267.494551] ==================================================================
[  267.501887] Disabling lock debugging due to kernel taint
[  267.507444] Kernel panic - not syncing: panic_on_warn set ...
[  267.507444] 
[  267.514811] CPU: 0 PID: 15428 Comm: syz-executor.3 Tainted: G    B           4.14.127+ #9
[  267.523144] Call Trace:
[  267.525721]  dump_stack+0xb9/0x10e
[  267.529248]  panic+0x1d9/0x3c2
[  267.532423]  ? add_taint.cold+0x16/0x16
[  267.536445]  ? retint_kernel+0x2d/0x2d
[  267.540325]  ? perf_output_read+0xe58/0xfc0
[  267.544628]  kasan_end_report+0x43/0x49
[  267.548583]  kasan_report.cold+0xca/0x2d5
[  267.552772]  ? perf_output_read+0xe58/0xfc0
[  267.557084]  ? perf_event_exit_cpu_context+0x170/0x170
[  267.562355]  ? deref_stack_reg+0xaa/0xe0
[  267.566421]  ? perf_output_copy+0x149/0x1d0
[  267.570726]  ? perf_output_sample+0xcea/0x1700
[  267.575307]  ? HARDIRQ_verbose+0x10/0x10
[  267.579351]  ? __perf_event_header__init_id.isra.0+0x276/0x430
[  267.585397]  ? check_preemption_disabled+0x35/0x1f0
[  267.590404]  ? perf_prepare_sample+0x656/0x1330
[  267.595055]  ? perf_event__output_id_sample+0x70/0x70
[  267.600227]  ? perf_output_sample+0x1700/0x1700
[  267.604878]  ? lock_acquire+0x10f/0x380
[  267.608840]  ? perf_prepare_sample+0x1330/0x1330
[  267.613584]  ? perf_event_output_forward+0x10b/0x220
[  267.618674]  ? perf_prepare_sample+0x1330/0x1330
[  267.623434]  ? check_preemption_disabled+0x35/0x1f0
[  267.629104]  ? __perf_event_overflow+0x116/0x320
[  267.633862]  ? perf_swevent_overflow+0x17b/0x210
[  267.638607]  ? ___perf_sw_event+0x11b/0x4a0
[  267.642924]  ? perf_swevent_event+0x19c/0x270
[  267.647415]  ? ___perf_sw_event+0x2a4/0x4a0
[  267.651721]  ? perf_trace_lock_acquire+0x122/0x4e0
[  267.656656]  ? perf_pending_event+0xd0/0xd0
[  267.660972]  ? HARDIRQ_verbose+0x10/0x10
[  267.665022]  ? __handle_mm_fault+0xd96/0x2640
[  267.669510]  ? lock_downgrade+0x5d0/0x5d0
[  267.673637]  ? __handle_mm_fault+0xcc0/0x2640
05:10:53 executing program 0:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x141})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

05:10:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  267.678119]  ? _raw_spin_unlock+0x29/0x40
[  267.682252]  ? __handle_mm_fault+0x6c5/0x2640
[  267.686744]  ? vm_insert_mixed_mkwrite+0x30/0x30
[  267.691491]  ? HARDIRQ_verbose+0x10/0x10
[  267.695540]  ? HARDIRQ_verbose+0x10/0x10
[  267.699615]  ? __do_page_fault+0x48e/0xb80
[  267.703861]  ? __perf_sw_event+0x42/0x80
[  267.707926]  ? __perf_sw_event+0x42/0x80
[  267.712081]  ? __do_page_fault+0x785/0xb80
[  267.716332]  ? bad_area_access_error+0x340/0x340
[  267.721106]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  267.725948]  ? page_fault+0x22/0x50
[  267.729580]  ? iov_iter_fault_in_readable+0x29c/0x350
[  267.735030]  ? iov_iter_init+0x1c0/0x1c0
[  267.739170]  ? generic_perform_write+0x158/0x450
[  267.743932]  ? filemap_page_mkwrite+0x2d0/0x2d0
[  267.748587]  ? current_time+0xb0/0xb0
[  267.752380]  ? lock_acquire+0x10f/0x380
[  267.756355]  ? __generic_file_write_iter+0x32e/0x550
[  267.761544]  ? generic_write_checks+0x252/0x410
[  267.766283]  ? ext4_file_write_iter+0x551/0xd60
[  267.770957]  ? ext4_llseek+0x7f0/0x7f0
[  267.774947]  ? __vfs_write+0x401/0x5a0
[  267.778834]  ? HARDIRQ_verbose+0x10/0x10
[  267.782896]  ? kernel_read+0x110/0x110
[  267.786800]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  267.792263]  ? rcu_read_lock_sched_held+0x10a/0x130
[  267.797278]  ? vfs_write+0x17f/0x4d0
[  267.800984]  ? SyS_write+0x102/0x250
[  267.804686]  ? SyS_read+0x250/0x250
[  267.808293]  ? do_clock_gettime+0xd0/0xd0
[  267.812436]  ? do_syscall_64+0x43/0x510
[  267.816408]  ? SyS_read+0x250/0x250
[  267.820034]  ? do_syscall_64+0x19b/0x510
[  267.824100]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  267.830020] Kernel Offset: 0xf600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  267.840837] Rebooting in 86400 seconds..