0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x60, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x300}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x68b8)

01:31:49 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x930)

01:31:49 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:49 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x40e0)

01:31:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x300000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:49 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0xf0ffffff}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  683.123546] binder: 1746:1750 Acquire 1 refcount change on invalid ref 0 ret -22
[  683.131670] binder: 1746:1750 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:49 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:49 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0xffffff9e}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:50 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x700000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:50 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x21f0)

01:31:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7ce0)

01:31:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0xf0ffffff00000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:50 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x11e8)

01:31:50 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  683.874201] binder: 1746:1784 Acquire 1 refcount change on invalid ref 0 ret -22
[  683.881852] binder: 1746:1784 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:50 executing program 5:
sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:50 executing program 5:
r0 = socket(0x0, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0xf0ffffffffffff}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:50 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8aa8)

[  683.997043] binder: 1796:1809 Acquire 1 refcount change on invalid ref 0 ret -22
[  684.004727] binder: 1796:1809 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x100000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x810)

01:31:51 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x2000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:51 executing program 5:
r0 = socket(0x10, 0x0, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:51 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2868)

01:31:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x4000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:51 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x570)

01:31:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7608)

[  684.745188] binder: 1796:1832 Acquire 1 refcount change on invalid ref 0 ret -22
[  684.752879] binder: 1796:1832 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0xf0ffff}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:51 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf00}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  684.865286] binder: 1844:1856 Acquire 1 refcount change on invalid ref 0 ret -22
[  684.872968] binder: 1844:1856 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:51 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:51 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x750)

01:31:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x84a8)

01:31:52 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x7a00, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x34000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:52 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1b60)

01:31:52 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef00", 0x9, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:52 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5fb8)

01:31:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x68e8)

[  685.619464] binder: 1844:1846 Acquire 1 refcount change on invalid ref 0 ret -22
[  685.627084] binder: 1844:1846 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:52 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000", 0xe, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:52 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:52 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffffff7f}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  685.784093] binder: 1895:1898 Acquire 1 refcount change on invalid ref 0 ret -22
[  685.791758] binder: 1895:1898 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf0}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:52 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0xa000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:52 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:31:52 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x480)

01:31:52 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xb28)

01:31:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x46f8)

01:31:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  686.524245] binder: 1895:1924 Acquire 1 refcount change on invalid ref 0 ret -22
[  686.531887] binder: 1895:1924 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:52 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240), 0x0)

01:31:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:53 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240), 0x0)

[  686.635566] binder: 1935:1947 Acquire 1 refcount change on invalid ref 0 ret -22
[  686.643198] binder: 1935:1947 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x300000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:53 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8418)

01:31:53 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x14e8)

01:31:53 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x600, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x30000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x35a0)

01:31:53 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240), 0x0)

01:31:53 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4e00)

01:31:53 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1368)

01:31:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf0ffff}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  687.382776] binder: 1935:1971 Acquire 1 refcount change on invalid ref 0 ret -22
[  687.390451] binder: 1935:1971 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:53 executing program 5:
r0 = socket$inet6(0xa, 0x202000000802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20)

01:31:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf00000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  687.506626] binder: 1982:1995 Acquire 1 refcount change on invalid ref 0 ret -22
[  687.514360] binder: 1982:1995 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x40030000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:53 executing program 5:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0xffffffffffffffba, 0x0, &(0x7f000031e000), 0x1c)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6c6f0000002400000000000008000011", 0x101})

[  687.777935] device lo entered promiscuous mode
[  687.785852] device lo left promiscuous mode
01:31:54 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x500000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5b80)

01:31:54 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2508)

01:31:54 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x918)

01:31:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:54 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00f520462101879e9f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7d}, [@ldst={0x2000cfad}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x48d, &(0x7f000000cf3d)=""/195}, 0x18)

[  688.245679] binder: 1982:2017 Acquire 1 refcount change on invalid ref 0 ret -22
[  688.253302] binder: 1982:2017 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf0ffffffffffff}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:54 executing program 5:
clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001500add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1)
rt_sigsuspend(&(0x7f0000000140), 0x8)

[  688.340971] binder: 2022:2039 Acquire 1 refcount change on invalid ref 0 ret -22
[  688.348686] binder: 2022:2039 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:54 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1f80)

01:31:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x68a0)

01:31:54 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r3=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r3+30000000})

01:31:55 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x6c000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:55 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4a88)

01:31:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1fc8)

01:31:55 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5538)

[  689.099568] binder: 2022:2028 Acquire 1 refcount change on invalid ref 0 ret -22
[  689.107469] binder: 2022:2028 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  689.208206] binder: 2083:2085 Acquire 1 refcount change on invalid ref 0 ret -22
[  689.216291] binder: 2083:2085 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x300}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:55 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r5+30000000})

01:31:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf0ffffff00000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:55 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3fd8)

01:31:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x200000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:56 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x74000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:56 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4bd8)

01:31:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5220)

01:31:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x160d}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:56 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7c50)

01:31:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf0ffffff}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xf000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r5+30000000})

01:31:56 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6bb8)

01:31:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xfffffff0}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:56 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3780)

01:31:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x62e8)

01:31:57 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x7a000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:57 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8358)

01:31:57 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4ea8)

01:31:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x56d0)

[  690.847004] binder_thread_write: 2 callbacks suppressed
[  690.847018] binder: 2130:2169 Acquire 1 refcount change on invalid ref 0 ret -22
[  690.860027] binder_thread_write: 2 callbacks suppressed
[  690.860037] binder: 2130:2169 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x400000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:57 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r5=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r5+30000000})

01:31:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  690.998684] binder: 2182:2190 Acquire 1 refcount change on invalid ref 0 ret -22
[  691.006411] binder: 2182:2190 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xfffffffffffff000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1638)

01:31:57 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8928)

01:31:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xfffff000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:58 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0xa, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:58 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5130)

01:31:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x400300}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3c0)

01:31:58 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7368)

[  691.744525] binder: 2182:2219 Acquire 1 refcount change on invalid ref 0 ret -22
[  691.752148] binder: 2182:2219 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9effffff}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  691.825643] binder: 2225:2228 Acquire 1 refcount change on invalid ref 0 ret -22
[  691.833303] binder: 2225:2228 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5220)

01:31:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffffff9e}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:58 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xd80)

01:31:58 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x73c8)

01:31:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7170)

01:31:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9effffff00000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffffff7f00000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:58 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80080, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000180)=0x1)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000})

01:31:58 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x100000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4c8)

01:31:58 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x32b8)

01:31:58 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6f0)

01:31:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x160d0000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  692.594167] binder: 2225:2269 Acquire 1 refcount change on invalid ref 0 ret -22
[  692.601909] binder: 2225:2269 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0xd16}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x160d000000000000}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  692.714267] binder: 2287:2291 Acquire 1 refcount change on invalid ref 0 ret -22
[  692.722038] binder: 2287:2291 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:59 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2550)

01:31:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x3, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:59 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x12d8)

01:31:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4c98)

[  692.825455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  692.845257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:31:59 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80080, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000180)=0x1)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000})

01:31:59 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x2000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:31:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x10, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:31:59 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1c80)

01:31:59 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3c18)

01:31:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7c08)

[  693.496952] binder: 2287:2325 Acquire 1 refcount change on invalid ref 0 ret -22
[  693.504703] binder: 2287:2325 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:31:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x2, [@generic='!']}]}, 0x1c}}, 0x0)

[  693.560222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:31:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0xb, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x12, [@generic='!']}]}, 0x1c}}, 0x0)

[  693.611784] binder: 2331:2339 Acquire 1 refcount change on invalid ref 0 ret -22
[  693.619474] binder: 2331:2339 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:00 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5ad8)

01:32:00 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6540)

01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0xa, [@generic='!']}]}, 0x1c}}, 0x0)

[  693.677495] netlink: 'syz-executor3': attribute type 18 has an invalid length.
01:32:00 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80080, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000180)=0x1)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000})

01:32:00 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x300000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7530)

01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x11, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:00 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3ca8)

01:32:00 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x31e0)

[  694.365595] binder: 2331:2376 Acquire 1 refcount change on invalid ref 0 ret -22
[  694.373230] binder: 2331:2376 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x6, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x2001, [@generic='!']}]}, 0x1c}}, 0x0)

[  694.486910] binder: 2385:2400 Acquire 1 refcount change on invalid ref 0 ret -22
[  694.494599] binder: 2385:2400 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x4801, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x10f, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x5, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x13, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x2, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:01 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x4c00, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:01 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4290)

01:32:01 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5ad8)

01:32:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x9, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1200)

01:32:01 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80080, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000180)=0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000})

01:32:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x10, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x8, [@generic='!']}]}, 0x1c}}, 0x0)

[  695.346734] netlink: 'syz-executor3': attribute type 16 has an invalid length.
01:32:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xf}}, 0x0)

01:32:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xec0}}, 0x0)

[  695.395563] netlink: 'syz-executor3': attribute type 8 has an invalid length.
01:32:01 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2868)

01:32:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2070)

01:32:02 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x7, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xfffffdef}}, 0x0)

01:32:02 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5c40)

01:32:02 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x17e8)

01:32:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5640)

01:32:02 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80080, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000180)=0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000})

[  696.095502] binder_thread_write: 2 callbacks suppressed
[  696.095516] binder: 2443:2483 Acquire 1 refcount change on invalid ref 0 ret -22
[  696.108685] binder_thread_write: 2 callbacks suppressed
[  696.108696] binder: 2443:2483 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x2000005c}}, 0x0)

01:32:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x33fe0}}, 0x0)

[  696.200119] binder: 2488:2495 Acquire 1 refcount change on invalid ref 0 ret -22
[  696.207789] binder: 2488:2495 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x7ffff000}}, 0x0)

01:32:02 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4710)

01:32:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x14}}, 0x0)

01:32:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x69a8)

01:32:03 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x4800000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:03 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x34b0)

01:32:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xc0}}, 0x0)

01:32:03 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3840)

01:32:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6990)

01:32:03 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80080, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000180)=0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000})

[  696.983428] binder: 2488:2506 Acquire 1 refcount change on invalid ref 0 ret -22
[  696.991377] binder: 2488:2506 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x2}, 0x0)

01:32:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x65}, 0x0)

[  697.076839] binder: 2535:2540 Acquire 1 refcount change on invalid ref 0 ret -22
[  697.084503] binder: 2535:2540 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x8}, 0x0)

01:32:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0xffffff1f}, 0x0)

01:32:03 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1608)

01:32:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x14e8)

01:32:04 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x4c000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:04 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xb70)

01:32:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x300}, 0x0)

01:32:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5c28)

01:32:04 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x60c0)

01:32:04 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80080, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000180)=0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000})

[  697.840866] binder: 2535:2581 Acquire 1 refcount change on invalid ref 0 ret -22
[  697.848550] binder: 2535:2581 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf000}, 0x0)

01:32:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xfffffffffffff000}, 0x0)

[  697.937565] binder: 2593:2599 Acquire 1 refcount change on invalid ref 0 ret -22
[  697.945489] binder: 2593:2599 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x9effffff00000000}, 0x0)

01:32:04 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3888)

01:32:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf0ffffff00000000}, 0x0)

01:32:04 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1770)

01:32:05 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x300, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5dd8)

01:32:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x40030000000000}, 0x0)

01:32:05 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8b38)

01:32:05 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3690)

01:32:05 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x18b)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x5, "c0b5fa9d6e19870d9fbccc78aefa7985d5a22f3cdcf6f33b58fa2a3fa7dbbeea0d7657b8656a75636516bfbd9b03c0606fda45811d7210f06ae8933d7d091abd", "d67acc1999b0ae0ccf0b4c17706026bea660a6f035abb2c8d186198d56f32815", [0x6, 0xcfbd]})
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000080)=""/94, 0xff95}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f00000005c0)=0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r3 = socket$kcm(0x29, 0x1000000000002, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80080, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000180)=0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000002c0))
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r5+30000000})

[  698.722651] binder: 2593:2636 Acquire 1 refcount change on invalid ref 0 ret -22
[  698.730526] binder: 2593:2636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x1000000}, 0x0)

01:32:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xffffff7f}, 0x0)

[  698.836338] binder: 2646:2650 Acquire 1 refcount change on invalid ref 0 ret -22
[  698.843972] binder: 2646:2650 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x400300}, 0x0)

01:32:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6438)

01:32:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x34000}, 0x0)

01:32:05 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6390)

01:32:05 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x4, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xffffff9e}, 0x0)

01:32:05 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x68b8)

01:32:05 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4d58)

01:32:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7308)

01:32:05 executing program 5 (fault-call:2 fault-nth:0):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  699.634286] FAULT_INJECTION: forcing a failure.
[  699.634286] name failslab, interval 1, probability 0, space 0, times 0
[  699.656482] CPU: 0 PID: 2697 Comm: syz-executor5 Not tainted 4.19.0-rc7-next-20181011+ #92
[  699.664906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  699.674258] Call Trace:
[  699.676858]  dump_stack+0x244/0x3ab
[  699.680526]  ? dump_stack_print_info.cold.2+0x52/0x52
[  699.685734]  should_fail.cold.4+0xa/0x17
[  699.689812]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  699.696061]  ? lock_release+0xa10/0xa10
[  699.700047]  ? perf_trace_sched_process_exec+0x860/0x860
[  699.705517]  ? kernel_text_address+0x79/0xf0
[  699.709940]  ? __mutex_lock+0x85e/0x16f0
[  699.714014]  ? netlink_dump+0x135/0x1050
[  699.718092]  ? fs_reclaim_acquire+0x20/0x20
[  699.722436]  ? lock_downgrade+0x900/0x900
[  699.726625]  ? perf_trace_sched_process_exec+0x860/0x860
[  699.732083]  ? do_syscall_64+0x1b9/0x820
[  699.736167]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  699.741532]  ? trace_hardirqs_on+0x310/0x310
[  699.745935]  __should_failslab+0x124/0x180
[  699.750156]  should_failslab+0x9/0x14
[  699.753961]  kmem_cache_alloc_node+0x26e/0x730
[  699.758532]  ? trace_hardirqs_on+0x310/0x310
[  699.762946]  ? debug_check_no_obj_freed+0x305/0x58d
[  699.767971]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  699.773501]  __alloc_skb+0x114/0x770
[  699.777203]  ? kfree_skbmem+0x154/0x230
[  699.781165]  ? netdev_alloc_frag+0x1f0/0x1f0
[  699.785562]  ? __kasan_slab_free+0x119/0x150
[  699.789960]  ? kfree_skbmem+0x154/0x230
[  699.793925]  ? kmem_cache_free+0x21a/0x290
[  699.798165]  ? kfree_skbmem+0x10b/0x230
[  699.802137]  ? pskb_put+0xb0/0xb0
[  699.805618]  ? netlink_skb_destructor+0x190/0x210
[  699.810452]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  699.815978]  netlink_dump+0x7df/0x1050
[  699.819853]  ? alloc_skb_with_frags+0x7d0/0x7d0
[  699.824520]  ? netlink_broadcast+0x50/0x50
[  699.828763]  ? __sk_queue_drop_skb+0x1f0/0x1f0
[  699.833342]  ? mark_held_locks+0x130/0x130
[  699.837568]  netlink_recvmsg+0xf6f/0x1480
[  699.841721]  ? netlink_dump+0x1050/0x1050
[  699.845891]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  699.851443]  ? aa_label_sk_perm+0x91/0x100
[  699.855685]  ? aa_sk_perm+0x22b/0x8e0
[  699.859483]  ? aa_file_perm+0x490/0x1060
[  699.863531]  ? aa_af_perm+0x5a0/0x5a0
[  699.867314]  ? aa_path_link+0x5e0/0x5e0
[  699.871293]  ? apparmor_socket_recvmsg+0x29/0x30
[  699.876123]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  699.881645]  ? security_socket_recvmsg+0x9c/0xc0
[  699.886389]  ? netlink_dump+0x1050/0x1050
[  699.890555]  sock_recvmsg+0xd0/0x110
[  699.894265]  sock_read_iter+0x39b/0x570
[  699.898279]  ? sock_recvmsg+0x110/0x110
[  699.902269]  do_iter_readv_writev+0x77c/0xa80
[  699.906759]  ? vfs_dedupe_file_range+0x670/0x670
[  699.911524]  ? rw_verify_area+0x118/0x360
[  699.915687]  do_iter_read+0x26e/0x650
[  699.919475]  ? dup_iter+0x270/0x270
[  699.923086]  ? proc_cwd_link+0x1d0/0x1d0
[  699.927137]  vfs_readv+0x175/0x1c0
[  699.930687]  ? compat_rw_copy_check_uvector+0x440/0x440
[  699.936075]  ? wait_for_completion+0x8a0/0x8a0
[  699.940647]  ? lock_release+0xa10/0xa10
[  699.944633]  ? fsnotify_first_mark+0x350/0x350
[  699.949214]  ? __fsnotify_parent+0xcc/0x420
[  699.953538]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  699.959097]  ? __fdget_pos+0xde/0x200
[  699.962911]  ? __fdget_raw+0x20/0x20
[  699.966611]  ? __sb_end_write+0xd9/0x110
[  699.970663]  do_readv+0x11a/0x310
[  699.974104]  ? vfs_readv+0x1c0/0x1c0
[  699.977810]  ? trace_hardirqs_off_caller+0x300/0x300
[  699.982907]  __x64_sys_readv+0x75/0xb0
[  699.986800]  do_syscall_64+0x1b9/0x820
[  699.990687]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  699.996038]  ? syscall_return_slowpath+0x5e0/0x5e0
[  700.000951]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  700.005791]  ? trace_hardirqs_on_caller+0x310/0x310
[  700.010796]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  700.015813]  ? prepare_exit_to_usermode+0x291/0x3b0
[  700.020817]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  700.025646]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  700.030838] RIP: 0033:0x457519
[  700.034028] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  700.052930] RSP: 002b:00007fd1a1820c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  700.060622] RAX: ffffffffffffffda RBX: 00007fd1a1820c90 RCX: 0000000000457519
[  700.067871] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003
[  700.075120] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
01:32:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x100000000000000}, 0x0)

01:32:06 executing program 5 (fault-call:2 fault-nth:1):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  700.082371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1a18216d4
[  700.089627] R13: 00000000004c3057 R14: 00000000004d4cb0 R15: 0000000000000004
[  700.102463] binder: 2694:2708 Acquire 1 refcount change on invalid ref 0 ret -22
[  700.110174] binder: 2694:2708 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x300000000000000}, 0x0)

01:32:06 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5268)

01:32:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4170)

[  700.166574] FAULT_INJECTION: forcing a failure.
[  700.166574] name failslab, interval 1, probability 0, space 0, times 0
[  700.218362] CPU: 1 PID: 2712 Comm: syz-executor5 Not tainted 4.19.0-rc7-next-20181011+ #92
[  700.226818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  700.236183] Call Trace:
[  700.238793]  dump_stack+0x244/0x3ab
[  700.242449]  ? dump_stack_print_info.cold.2+0x52/0x52
[  700.247653]  should_fail.cold.4+0xa/0x17
[  700.251705]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  700.256801]  ? save_stack+0xa9/0xd0
[  700.260434]  ? kasan_kmalloc+0xc7/0xe0
[  700.264318]  ? kasan_slab_alloc+0x12/0x20
[  700.268468]  ? kmem_cache_alloc_node+0x144/0x730
[  700.273251]  ? __alloc_skb+0x114/0x770
[  700.277165]  ? netlink_dump+0x7df/0x1050
[  700.281210]  ? netlink_recvmsg+0xf6f/0x1480
[  700.285523]  ? sock_recvmsg+0xd0/0x110
[  700.289431]  ? do_iter_readv_writev+0x77c/0xa80
[  700.294103]  ? do_iter_read+0x26e/0x650
[  700.298072]  ? vfs_readv+0x175/0x1c0
[  700.301771]  ? do_readv+0x11a/0x310
[  700.305387]  ? fs_reclaim_acquire+0x20/0x20
[  700.309735]  ? lock_downgrade+0x900/0x900
[  700.313871]  ? perf_trace_sched_process_exec+0x860/0x860
[  700.319306]  ? lock_downgrade+0x900/0x900
[  700.323471]  __should_failslab+0x124/0x180
[  700.327720]  should_failslab+0x9/0x14
[  700.331550]  kmem_cache_alloc_node_trace+0x270/0x740
[  700.336656]  ? kasan_unpoison_shadow+0x35/0x50
[  700.341266]  ? kasan_kmalloc+0xc7/0xe0
[  700.345160]  __kmalloc_node_track_caller+0x3c/0x70
[  700.350172]  __kmalloc_reserve.isra.40+0x41/0xe0
[  700.354921]  __alloc_skb+0x150/0x770
[  700.358623]  ? kfree_skbmem+0x154/0x230
[  700.362612]  ? netdev_alloc_frag+0x1f0/0x1f0
[  700.367023]  ? __kasan_slab_free+0x119/0x150
[  700.371434]  ? kfree_skbmem+0x154/0x230
[  700.375417]  ? kmem_cache_free+0x21a/0x290
[  700.379641]  ? kfree_skbmem+0x10b/0x230
[  700.383618]  ? pskb_put+0xb0/0xb0
[  700.387093]  ? netlink_skb_destructor+0x190/0x210
[  700.391936]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  700.397466]  netlink_dump+0x7df/0x1050
[  700.401341]  ? alloc_skb_with_frags+0x7d0/0x7d0
[  700.405997]  ? netlink_broadcast+0x50/0x50
[  700.410243]  ? __sk_queue_drop_skb+0x1f0/0x1f0
[  700.414812]  ? mark_held_locks+0x130/0x130
[  700.419052]  netlink_recvmsg+0xf6f/0x1480
[  700.423198]  ? netlink_dump+0x1050/0x1050
[  700.427348]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  700.432901]  ? aa_label_sk_perm+0x91/0x100
[  700.437157]  ? aa_sk_perm+0x22b/0x8e0
[  700.440956]  ? aa_file_perm+0x490/0x1060
[  700.445063]  ? aa_af_perm+0x5a0/0x5a0
[  700.448866]  ? aa_path_link+0x5e0/0x5e0
[  700.452835]  ? apparmor_socket_recvmsg+0x29/0x30
[  700.457575]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  700.463096]  ? security_socket_recvmsg+0x9c/0xc0
[  700.467854]  ? netlink_dump+0x1050/0x1050
[  700.472012]  sock_recvmsg+0xd0/0x110
[  700.475817]  sock_read_iter+0x39b/0x570
[  700.479778]  ? sock_recvmsg+0x110/0x110
[  700.483748]  do_iter_readv_writev+0x77c/0xa80
[  700.488233]  ? vfs_dedupe_file_range+0x670/0x670
[  700.493090]  ? rw_verify_area+0x118/0x360
[  700.497253]  do_iter_read+0x26e/0x650
[  700.501085]  ? dup_iter+0x270/0x270
[  700.504705]  ? proc_cwd_link+0x1d0/0x1d0
[  700.508770]  vfs_readv+0x175/0x1c0
[  700.512297]  ? compat_rw_copy_check_uvector+0x440/0x440
[  700.517651]  ? wait_for_completion+0x8a0/0x8a0
[  700.522217]  ? lock_release+0xa10/0xa10
[  700.526190]  ? fsnotify_first_mark+0x350/0x350
[  700.530786]  ? __fsnotify_parent+0xcc/0x420
[  700.535156]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  700.540732]  ? __fdget_pos+0xde/0x200
[  700.544517]  ? __fdget_raw+0x20/0x20
[  700.548214]  ? __sb_end_write+0xd9/0x110
[  700.552261]  do_readv+0x11a/0x310
[  700.555713]  ? vfs_readv+0x1c0/0x1c0
[  700.559443]  ? trace_hardirqs_off_caller+0x300/0x300
[  700.564547]  __x64_sys_readv+0x75/0xb0
[  700.568441]  do_syscall_64+0x1b9/0x820
[  700.572349]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  700.577700]  ? syscall_return_slowpath+0x5e0/0x5e0
[  700.582632]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  700.587472]  ? trace_hardirqs_on_caller+0x310/0x310
[  700.592489]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  700.597499]  ? prepare_exit_to_usermode+0x291/0x3b0
[  700.602525]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  700.607358]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  700.612532] RIP: 0033:0x457519
[  700.615716] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  700.634611] RSP: 002b:00007fd1a1820c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  700.642333] RAX: ffffffffffffffda RBX: 00007fd1a1820c90 RCX: 0000000000457519
[  700.649600] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003
[  700.656870] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
01:32:07 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x47b8)

[  700.664174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1a18216d4
[  700.671436] R13: 00000000004c3057 R14: 00000000004d4cb0 R15: 0000000000000004
01:32:07 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0xffffff7f00000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:07 executing program 5 (fault-call:2 fault-nth:2):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x4}, 0x0)

01:32:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2580)

01:32:07 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x2}, 0x0)

01:32:07 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x52f8)

[  700.845239] binder: 2738:2746 Acquire 1 refcount change on invalid ref 0 ret -22
[  700.852891] binder: 2738:2746 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:07 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x7ffff000}], 0x1)

01:32:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xfffffff0}, 0x0)

01:32:07 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0xfffffffffffffdef}], 0x1)

01:32:07 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3120)

01:32:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7d40)

01:32:07 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x400000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x300}, 0x0)

01:32:07 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0xfffffdef}], 0x1)

01:32:07 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2c58)

01:32:07 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3ea0)

01:32:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x22c8)

[  701.595575] binder: 2738:2783 Acquire 1 refcount change on invalid ref 0 ret -22
[  701.603243] binder: 2738:2783 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:08 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0xfdef}], 0x1)

01:32:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x3000000}, 0x0)

01:32:08 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x860}], 0x1)

01:32:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf00}, 0x0)

[  701.704934] binder: 2793:2797 Acquire 1 refcount change on invalid ref 0 ret -22
[  701.712560] binder: 2793:2797 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:08 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x66a8)

01:32:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3fc0)

01:32:08 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x4c00000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:08 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3768)

01:32:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x3}, 0x0)

01:32:08 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2000022f}], 0x1)

01:32:08 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7560)

01:32:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1e18)

[  702.457919] binder: 2793:2816 Acquire 1 refcount change on invalid ref 0 ret -22
[  702.465725] binder: 2793:2816 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:08 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0xec0}], 0x1)

01:32:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x3000000000000}, 0x0)

[  702.566038] binder: 2842:2847 Acquire 1 refcount change on invalid ref 0 ret -22
[  702.573663] binder: 2842:2847 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf0}, 0x0)

01:32:09 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0xffffff1f)

01:32:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x200000000000000}, 0x0)

01:32:09 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3a38)

01:32:09 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x6, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:09 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x300)

01:32:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6000)

01:32:09 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x23b8)

01:32:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x0)

01:32:09 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x67c8)

[  703.329097] binder: 2842:2882 Acquire 1 refcount change on invalid ref 0 ret -22
[  703.336781] binder: 2842:2882 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xfffff000}, 0x0)

01:32:09 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0xff00)

01:32:09 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x2)

[  703.446463] binder: 2889:2895 Acquire 1 refcount change on invalid ref 0 ret -22
[  703.454104] binder: 2889:2895 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf000000}, 0x0)

01:32:09 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x8)

01:32:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x160d}, 0x0)

01:32:10 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0xa00, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:10 executing program 5:
recvmmsg(0xffffffffffffff9c, &(0x7f00000043c0)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000580)=""/215, 0xd7}], 0x9, &(0x7f0000000740)=""/84, 0x54, 0x1}, 0x7}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/181, 0xb5}, {&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/80, 0x50}, {&(0x7f00000019c0)=""/12, 0xc}, {&(0x7f0000001a00)=""/244, 0xf4}, {&(0x7f0000001b00)=""/184, 0xb8}, {&(0x7f0000001bc0)=""/63, 0x3f}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x9, &(0x7f0000001d00)=""/150, 0x96, 0x101}, 0x9}, {{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000001e40)=""/185, 0xb9}, {&(0x7f0000001f00)=""/238, 0xee}, {&(0x7f0000002000)=""/147, 0x93}, {&(0x7f00000020c0)=""/57, 0x39}, {&(0x7f0000002100)=""/135, 0x87}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/91, 0x5b}, {&(0x7f0000004240)=""/137, 0x89}], 0x9, 0x0, 0x0, 0x400}, 0x80}], 0x3, 0x40, &(0x7f0000004480)={0x0, 0x989680})
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000044c0)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x800)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000004500)={r1, 0x7, 0x5, "2083fb3de18e11c842cf5c1bab34378670382fb967c7e752ca4f0e0e1ede540db1f4dce6c0f91e107b3af53cbf17bffdc1c0683fa176d98b07f0e18654d7bb504a198e05255b6bfef01a61d6311655b4cc0c7b95d53caf4b8f2da2c3392c8ffb60731b0ee581ccc7dbb59846b891f8bfd7c8dfe383e654cf3e874f1f4d8ed25b01bac47fcccb9cb841a3cb051ce5c2a1ef2219fb9b32e56493b01894ec218e1d1cd282c9d02376a6c062a7003e1edb7c1a822e659b466adcbbcd5e9899d925e9b3"})
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3f48)

01:32:10 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x61e0)

01:32:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x2000000}, 0x0)

01:32:10 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1ab8)

[  704.182347] binder: 2889:2941 Acquire 1 refcount change on invalid ref 0 ret -22
[  704.190060] binder: 2889:2941 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xd16}, 0x0)

01:32:10 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0xffffffffffffdffe, 0x0, 0xffffffffffffff1c)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = dup3(r0, r0, 0x80000)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x3, 0x7})
unshare(0x10000)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x0, <r2=>0x0, 0x1, 0xd6})
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000180)={r2, 0x7fffffff})
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2)

01:32:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf}, 0x0)

[  704.299382] binder: 2960:2963 Acquire 1 refcount change on invalid ref 0 ret -22
[  704.307105] binder: 2960:2963 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x160d000000000000}, 0x0)

01:32:10 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0xe}], 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000080))
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0xfffffffffffffffa)

01:32:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x4000000}, 0x0)

01:32:11 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x68, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:11 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x47d0)

01:32:11 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x27f0)

01:32:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xe70)

01:32:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0)

01:32:11 executing program 5:
r0 = socket(0xd, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x460000, 0x80)
write$P9_RREADDIR(r1, &(0x7f0000000280)={0x87, 0x29, 0x2, {0x4, [{{0x40, 0x2, 0x7}, 0x9, 0x800, 0x7, './file0'}, {{0x10, 0x1, 0x8}, 0xffff, 0x6, 0x7, './file0'}, {{0x98, 0x3, 0x4}, 0x7, 0x7f, 0x7, './file0'}, {{0x80, 0x2, 0x3}, 0x8001, 0x6, 0x7, './file0'}]}}, 0x87)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'eql\x00', &(0x7f0000000000)=@ethtool_eeprom={0x43, 0x6, 0x5, 0x81, "ed40a2181bf98ce2fc989b0087d0e7a89b5ec279539cc3a15cd241818c4b819cc989e9349daf34da24deef4dd8703efb5f520f586d0637e5ae160303c83e3d1a11bfed821a89ae5d129352d8309d7885a1a948e5741d37c2fe39ed9b45645ded2be56467c3c33b63964d06e7a725b47131db3b58a1d1f56d8fe302151c1cc8a96e"}})

[  705.078639] binder: 2960:2992 Acquire 1 refcount change on invalid ref 0 ret -22
[  705.086328] binder: 2960:2992 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0)

01:32:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf00000000000000}, 0x0)

01:32:11 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e20, 0x4, @mcast2}}}, 0x88)

[  705.183719] binder: 3001:3016 Acquire 1 refcount change on invalid ref 0 ret -22
[  705.191695] binder: 3001:3016 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x400000000000000}, 0x0)

01:32:11 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
accept(r0, &(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x80)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x160d0000}, 0x0)

01:32:12 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x6c00000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:12 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5490)

01:32:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6ea0)

01:32:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0xf0ffff}, 0x0)

01:32:12 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4c08)

01:32:12 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="c442f92a7000452439b963020000b86bc9479bba000000000f302e450f01c966400f388027400f00de66baf80cb89865bd8aef66bafc0c66ed430f1a32c4412311f664430f01df", 0x47}], 0xaaaab66, 0x0, &(0x7f0000000100), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f00000006c0)=""/186, 0xba}], 0x6, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000))

01:32:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x30000}, 0x0)

01:32:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x9effffff}, 0x0)

01:32:12 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4698)

01:32:12 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xa20)

01:32:12 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x3, 0x4, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000100), &(0x7f00000001c0)=""/113}, 0x18)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x9, 0x3f, 0x4, 0x97, 0x3, 0x100, 0x8001}, 0xc)
sendto(r0, &(0x7f0000000040)="120000001600e7ef007b000000040000002c9f6dc019ddb409cd63c39e7464eafa9b3dbc9fa3e01fcc958827c92e720e18af0f4abf1f89b36b3123222bab71827d12b40f1de2045b2da183ec522dafdf22cc6dbf55ae1b9741e968cf1c0740d04406223a470dac5009e6", 0x118, 0x0, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0)=0x7c5a, 0x2)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
socket$inet6(0xa, 0x6, 0x20)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x24e24, 0xffffffffffffff83, @mcast2, 0x6c6ec991}, 0x1c)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))
getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x8000, 0x0)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000002c0)=0x3ff, &(0x7f0000000300)=0x2)

01:32:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xc18)

01:32:13 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x6800000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0)

01:32:13 executing program 5:
r0 = socket(0x0, 0x803, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x22000)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x113, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2}}, 0x10)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x2c60aef7fa79b5d3)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x9)

01:32:13 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xc48)

01:32:13 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4938)

01:32:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x62b8)

[  706.788977] binder_thread_write: 2 callbacks suppressed
[  706.788991] binder: 3055:3061 Acquire 1 refcount change on invalid ref 0 ret -22
[  706.802058] binder_thread_write: 2 callbacks suppressed
[  706.802070] binder: 3055:3061 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0)

01:32:13 executing program 5:
r0 = socket(0x10, 0x803, 0x4)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002840)=<r1=>0x0)
r2 = getpgid(r1)
sendmsg$inet_sctp(r0, &(0x7f0000002800)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002740)=[{&(0x7f0000000280)="99017749b5286fb687a96ec2cb5c2f21648bc55dad8a1cd8f648536464f3ae2149912ade4391ca355ec8640a06f07e2a64c0aa5a8ee4f08c2e34f2da2953cca5428b4bcd74188bd63dd679146353008b936c4b7a33b7748bfeb3e9da8d06c335589b0823f3c30b51e42239f1c7341f01d7d0bcd9d34099a5ad450b96bfa17590df811733cb5e0631689466b221b29744ea98bf52ccbc12dfcab735c04e7157", 0x9f}, {&(0x7f0000000340)="bee7ba6429af5963479ccaa4cf840569ab0bb9479280be8dd9537fcdb920cd3e1ab073493bf99affa6144c5724e80cdc5252888b45776fe5ca05179bea9d1b18a7fcb6b231f6cace650cd84afdab2db7f189e0d7a1af21951c1e3cfec0ea2f2a20d8d4f999b965d6bb59f9d16e262ad49a7073000ffcc086d3ee2c14a1fb284b87a99b9704c1c4f2917cee9699fe75ac690b", 0x92}, {&(0x7f0000000400)="84dd974472d85e8fd80b052f1ac438fd8e9f40e462b5272123ea7f6c7aa5da2b8210781bc9246a341f0ed052a2195183936bc8d51bd326b20d4ea8e1f589f8722fab8a5b67b78f886f3fa5660b4c", 0x4e}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="c217c7117a16844e8f84e1153e6ea6b13ec48ecb3fc7f2484d9eafb0eb09177ac045ec5f9d82529d031d25d49f463c430f34bd88653fccf777d3fbe5aa737f5d6d2637e39d2d1c7eb857ba44287e82263a2680831f746811eea6a0364229349515035db9295ca1845ba6840649f0a6b27122c44a", 0x74}, {&(0x7f0000001500)="dd7a7086d79c6d650f1d73ddbf57178625011037baa23293da19f24d8da03c97241735f627069482c49458aa96129f51a186761c998e08ece4951d0f7dde07ba2f5a00cc258d3c943bbc9b81934d6582325482bcca959275bfa52d55c78f14811c26329408b3216f663d77c5694d538554b465f9a508b4b39514236125d7f07333e30127be877a2f932e259993fbb5be91c9b1bac66b670da3983472cd8516f161906bef", 0xa4}, {&(0x7f00000015c0)="789111c94d2e3dc95a05a5f555f52b38310f1d3b6b3ffb588cadd0bf510e86d292d9e17f9c8456a1c3a9a7b6982ec49ac7c3902e7e8ebc4e80369ec3e68295fbc82bea640a873b0cb3ab0d7d9a6adf23e44607c631c7", 0x56}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="4f63869255e09213b4772aa9460f22d6d21c6c5a021b4c988c3f8a2cfd5423ebea2207870bea0fd686731a9a816b4a0831a3f9a1bd93b5848ce7fc4eb50382bb68bb1c0ceba7f3530b8b08259d91a3ce61e06cd04c4442190dabd68e1c4f08c7518dacc8fe92913e6cee891575e63e6091f3ed0ecaab0d68983111aef66f3f6c1a1912e1bb62b4fe84d9e470d16fbaf12ad3c3b10dac02a0eaab90c3023584a27b8adb6c3eb848b4984332f24ff9b7da1caac1d72e7452787d1efd526cebdf0bf3c885f8a3ba7913beb8dadea1b5afb59278b0aef7ed1c71f2b40302b32a6febd08929d320935cb5f0a9d36e", 0xec}], 0x9}, 0x0)
r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0x7, 0x2, 0x3f, 0x0, 0x2cc0000000000000, 0x52020, 0x1, 0x1, 0x8, 0xff, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x0, 0x9, 0x1, 0xfffffffffffffffc, 0x1f, 0x635, 0x0, 0xffff, 0x8000, 0x1, 0x800, 0x89b, 0x1, 0x100000000, 0x100000001, 0xffffffffffff0000, 0x10000000000, 0x9, 0x7, 0xffffffff, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x4}, 0xc0, 0x7, 0x4, 0x5e1d564ccaddbdaa, 0x1, 0x2, 0xe1c6}, 0xffffffffffffff9c, 0x6, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000180)='./file0\x00', 0x80)
perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x1000, 0x4, 0x400, 0xfff, 0x0, 0x3, 0x20, 0x5, 0x0, 0x7ff, 0x9a5, 0x7, 0x7ff, 0x769e43f5, 0xfffffffffffffffd, 0x6, 0x80000000, 0x100000001, 0x8, 0x1ff, 0x20, 0x1f, 0x3, 0x80000001, 0x1, 0x76, 0x3, 0x0, 0x3, 0x3, 0x80000000, 0xb177, 0x1f, 0x8, 0x8, 0x7, 0x0, 0x5, 0x3, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x81, 0x5, 0x7, 0x683, 0x0, 0x61}, r2, 0x5, r3, 0x1)

01:32:13 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="000000a1000000000000000000000000000099", 0x13, 0x8000, 0x0, 0xf1)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
socket$inet6(0xa, 0x3, 0xc00001)

01:32:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf000}, 0x0)

01:32:13 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x0)

01:32:13 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xa38)

[  707.000668] binder: 3123:3137 Acquire 1 refcount change on invalid ref 0 ret -22
[  707.008906] binder: 3123:3137 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:14 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x6000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4650)

01:32:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf00}, 0x0)

01:32:14 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8)
quotactl(0x9, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000280)="896fe1bbe4e7f2d775160494ee480af914503a63e8160be93e778c269f1d446a40c9d0b9ea1b3e34fa9c857688a346a69c9c1036fb6c2b68ce7281a6d0d6cc2d040bb750f9e383650aac543b69a98b9e740886b591123e1c143a88f7e890bcae6e5e6696ea34")
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:14 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x27d8)

01:32:14 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1020)

[  707.726894] binder: 3123:3157 Acquire 1 refcount change on invalid ref 0 ret -22
[  707.734644] binder: 3123:3157 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:14 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
socket(0x13, 0x807, 0x2)

01:32:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x40030000000000}, 0x0)

01:32:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0)

[  707.856366] binder: 3168:3179 Acquire 1 refcount change on invalid ref 0 ret -22
[  707.864168] binder: 3168:3179 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0)

01:32:14 executing program 5:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x111000, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x1, 0xffff, 0xc4a7, 0x66, 0x3, 0x3e, 0x1, 0x309, 0x38, 0x3c1, 0x100000001, 0x3006c7a8, 0x20, 0x1, 0x4, 0x2, 0x2b}, [{0x70000000, 0x81, 0x8, 0x3, 0x8, 0xfffffffffffffffe, 0x7, 0x100000001}, {0x7, 0xffffffffffffff81, 0x9, 0x1, 0x4, 0x0, 0xfffffffffffffff7, 0x1ff}], "7d4458bf0662cab93ccfb6c5b891149513001b94a884c39e80306b3bb315eb238ce5aa42e812637f607b0b6936d4e0ca02b90beea07e18b5ceb581aaa225f4549fbbcc137784357a44e24c85d52ee65d0735ea3d598b809d98e416fcef38b8cc1f8e28a88111d7be0ad30848a33179c5b399ddc95bf6d76055baf4b64915fd680b242b1b4a6b0fb795ed04dfda6524dc39616edc4f2aaa32937541a9e0af4edd781b05996ffae035f6dfbd6ca8bafb12b628068e", [[], [], [], [], []]}, 0x62c)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:14 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6510)

01:32:14 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x4c, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:14 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x51c0)

01:32:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x3}, 0x0)

01:32:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x79b0)

01:32:14 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6, 0x5, 0x2, 0xffffffffffffff00, 0x0, 0x23b, 0x1, 0x4, 0x6, 0x2, 0x71, 0x20, 0xfffffffffffffffb, 0x0, 0x4, 0x9, 0x8, 0x7ff7, 0x6, 0xfff, 0x1f, 0x8001, 0x7cf, 0xd077, 0x9, 0x40, 0x0, 0x0, 0x401, 0x2e5, 0x1, 0x7d, 0x1, 0x1f, 0x25, 0x3a0e, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x8, 0xfff, 0x4, 0x1, 0x1, 0x8}, r1, 0x5, r2, 0x2)

01:32:14 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5b08)

[  708.600264] binder: 3168:3174 Acquire 1 refcount change on invalid ref 0 ret -22
[  708.608371] binder: 3168:3174 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x300}, 0x0)

01:32:15 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)=""/236, 0xec}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000000600)=""/216, 0xd8}], 0x8, &(0x7f0000000780)=""/145, 0x91, 0xd63}, 0x41)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x10000000000000d8)
socket$inet(0x2, 0xe, 0x101)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vga_arbiter\x00', 0x4000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000900)={0x0, @aes256})
mknodat(r1, &(0x7f00000008c0)='./file0\x00', 0x8048, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))

01:32:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0)

01:32:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x3000000000000}, 0x0)

01:32:15 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/5, 0x5}, {&(0x7f00000004c0)=""/128, 0x80}], 0x2, &(0x7f0000000580)=""/8, 0x8, 0x4}, 0x12160)
setsockopt(r0, 0x6, 0xffff, &(0x7f0000000640)="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", 0xfc)
r1 = gettid()
ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000900)={&(0x7f0000000840)=""/192, 0xc0})
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendto$unix(r0, &(0x7f0000000040)="1242f4629f11c978196a96d03c6190586bb52dab2f1e7aa3d8f422b48323d36794db55933cd5bd7a850719bd8e120f7ec07f6dde7af93d236ea083a19e511e92b359934519b76c38a4be5cb1cb2e64cadc5016b3a601d54c548d073bf015eae0d3a89b8f33d33acecff54e46ac7cefd06c1b2c8d792ac256ad8950837f36984404e67c5153536604147a6786bf3491fc650e37c3c338d5669ec18e16bef1626395392ceb", 0xa4, 0x40, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000340)="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", 0xfc}], 0x1, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x20, 0x6, 0x7fffffff}, 0xc)
syz_open_dev$audion(&(0x7f00000007c0)='/dev/audio#\x00', 0x1, 0x40800)
r3 = dup3(r2, r0, 0x80000)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000600)=0x8000, 0x4)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000800))
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x5, 0x101, 0x6, 0xffff, 0x7be, {<r4=>0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x1a2147ae}}, 0x3, 0x4, 0x5, 0x4, 0x3}}, &(0x7f0000000100)=0xb0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000780)=0x4)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r4, 0x8001, 0x80000001}, &(0x7f00000001c0)=0x10)

[  708.781667] binder: 3231:3244 Acquire 1 refcount change on invalid ref 0 ret -22
[  708.789353] binder: 3231:3244 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0)

01:32:15 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x74, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:15 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3a8)

01:32:15 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x49f8)

01:32:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

01:32:15 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={<r1=>0x0, 0x400, 0x200, 0x3}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x100000001, 0x30, 0x80000000, 0xaa}, &(0x7f00000002c0)=0x18)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0x81, 0x8, 0x100, 0x1000, 0x1}, 0x14)
set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x8001, &(0x7f0000000340)={&(0x7f0000000080)}}, 0xffffffffffffff61)

01:32:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8178)

[  709.490320] binder: 3231:3266 Acquire 1 refcount change on invalid ref 0 ret -22
[  709.497949] binder: 3231:3266 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:15 executing program 5:
r0 = socket(0xa, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0)

[  709.583958] binder: 3271:3281 Acquire 1 refcount change on invalid ref 0 ret -22
[  709.591853] binder: 3271:3281 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0)

01:32:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x400300}, 0x0)

01:32:16 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7f8)

01:32:16 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:16 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x2, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8d0)

01:32:16 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1ef0)

01:32:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x4}, 0x0)

01:32:16 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004080)='/dev/hwrng\x00', 0x200040, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000040c0))
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000016c0)={<r2=>0x0, 0xa7, "70bb7f0bb4e7075de9b10d0944881f0a3035faa898b3f8f59d01cd0bc1f2bfbf4308e70f16438145ed3750bfa180fb82da737e50480055740a41fdd12215f60c7117ffa305539b3008bad3ad6488bcc95572f8a29eb97366f73394616a17b79122849f9ee6d1035de7d6b06ccb4159588dfa5cc855873dcc8f5192fa0ee7216dabca35a4144c646f17e69ec382b7b997530bdc078aad1b4ed996f72018f856d9d9a4042104f795"}, &(0x7f0000001780)=0xaf)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000003e80)=@assoc_value={<r3=>0x0, 0x4}, &(0x7f0000003ec0)=0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000003f80)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b76666194c02c48b5436b8c164abea4406ce238ecf5ad1dedebbcf2d82e8b1936dca015e556a56d454ee250c268c07bc88023f80afdc8910298d07eda1ac92d4c84424ba941a6b3593eb177ac82bf69d7c86cfc3fd7d9415562c29865", 0x5d}, {&(0x7f00000000c0)="0d899e9531924d1494bd0130ddd242404bd618ddf02dfab5bd7a032682ff0748e39403b6c187061039b7fcb06eaf9282", 0x30}, {&(0x7f0000000280)="ddb6e318397fd89ddcb6cf349429b5a860c66a36989465fcfe68f613851d2575c968ae4663bf2314c26329f083d8dec6df75d680070922f1f346253660ff4ec56267b2820b261ff4987caa80a8cd62b4da57777478b8c97a62d8e7be271053f1c7d5b5129ad068e67ff17deeabf43d6677967fa72d2fba629229217154db9d03d96dacbf062547323e6c1e788b5b1470cf1fdea83fd5f9fca939456d8e8639e500beb656ad69d53c4f6bad4ee1f98618", 0xb0}], 0x3, 0x0, 0x0, 0x20000000}, {&(0x7f0000000180)=@in6={0xa, 0x4e23, 0x7ff, @mcast1, 0x100000000}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000340)="53f2c1046136bd2ab545d55e52502d9961d18544d84e7373571fec7c3656b5a0924678bb7702b3c1f51eb4881205fcbd9e40e6d655046c7b33780a9ac519e41279eeff150a30fcef181c80311e58fa0e19dc6497ffef0878f7384b044cd4c84f66958c1195362fa18bfbd7ebf24cb15753aaa21d20092ce94adf14886a954c3830efee8a9d2bf348dcb3ec7d89e91cc7e0ea49022b6a0c5b529b1856d8983babfb9b3156ad2415aeec125e1f964334402378e1d8ac9987", 0xb7}, {&(0x7f00000001c0)="2195956b20d7790b3b846019438af846376609d5e330", 0x16}, {&(0x7f0000000400)='a'}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="f1180aee700a126b9efc3e05cc9fc42fcbf241b69dc0cf58778f47264d7309577c8269bb3f349b9d7d98eed1f9fa97b04e1acd5caec9cae8b2b09f94f1741f52ad25096e654f429a7b6be92755a734e53157002cc8ad322ed7ed75c1bf12472601b0e5a436cc93656b109f7950f46f2e9aa407dc4f48fbb8a363039f901a4937f7f2a0cfcc002ea212c2588f82abda9d8b24a92fe512689d1a", 0x99}, {&(0x7f0000001500)="497784545875d00ef590dee14a1fd5dff8f59838872bf55bffdbd95a932226904dd43b125d44fcef4dc75a58caaf387e1c656463a6748c33f5d0b8a6b76f31f38ee21e21bfe8f2d7a1ea550a1d041091de3d84b10766d7557f010ddc8ad94a34616b73d50da6ded869f42c51434fe089162e6453454ac43695c5c9a5b8b48c1070d8df2607c1bd69843f4169733f0f16bd2b1ab0607b7e45d26d49583433fcde6da89487794e25fe0f78d1013b51f108c7013ef0afe4", 0xb6}, {&(0x7f00000015c0)="512b5833f3d5fff5449a05f2dec4aa475e19933d795172c7ace0646cf52c96a5bbdbf50c8acf5aef8d7d7584354b451c39bbfb2aa0b2a02d11c2f1dc305e33751e1be821b4b2e278351c8295cb586ac62701ec2f4362f1af6e298c01593909a8b50a0fdb613b06dcb8da00bc1d8440718627e71050c1", 0x76}], 0x7, &(0x7f00000017c0)=[@init={0x18, 0x84, 0x0, {0xfffffffffffffffd, 0x8000, 0x3532, 0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x1, 0x4, 0x0, 0x8, 0x9, 0x2, 0x3, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x40, 0x5, 0x6, 0x3087}}], 0x98, 0x14}, {&(0x7f0000001880)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003ac0)=[{&(0x7f00000018c0)="96f16616f1c5b753ce7a0e2af7b3835b04abbadf9c80d55e537955fd9aa1ab68072d3294ecda426a77ecd37f12822be749e304aab98e3999bb56a8399b70184aaed175e402dafc2fd7796229888bb6d5b8dd90d96ff517fddcc35499c64c9af588acc58dcfc1af5d855c25a7e0bb", 0x6e}, {&(0x7f0000001940)="1ae81a66c64e663a5b52a116d26aa6e07bcdf168722d2e747de183697a7ee07b27b59d19a0ac812bd0329b5dc9008164d9651b83d914998d8b89d9ca70e90eb61ab550a272dfe85dbf9dd3fca5533c1354533f1514ad10ed8a290ad24c25b30d2c9e", 0x62}, {&(0x7f00000019c0)="318c94522a17cccee45c021f697ea42bb1312700efd6cb1978c26baaf009170d44686a6bfdb31d6388c9ece00bdb481124d5393d1ab5dbc00ef8046249d1dd19c6a38311dcffd965dd105c5ee5c487528ae439b5b55bda527cab2425b2720673022a7ac8ad7f0dea3be6f04d0a0c682e04de148e5eefd56c7ce50795dd2833", 0x7f}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="a2f3193083279e11c00a1193d94285148db2ab4bc047e4dec51df60b708dd1adaadb80b0de0cc2f19e9eccd0a219365a92d99e4314c795e0e2", 0x39}, {&(0x7f0000003a80)="00aceb9fac3de60a3a8cfa5804bdf1b3c0e22ab6dd9b7219f394d5d4d5dbd06c899313462ba5ec7869c7c8d7650f", 0x2e}], 0x7, &(0x7f0000003b40)=[@authinfo={0x18, 0x84, 0x6, {0x401}}], 0x18, 0x40000}, {&(0x7f0000004100)=@in6={0xa, 0x4e23, 0x8, @remote, 0x10001}, 0x1c, &(0x7f0000003e00)=[{&(0x7f0000003bc0)="614bb839463998670d9420b2adca166a63a0b90dedc15dd4e2cd7ff3fae2c3f3d16296ad5581868ba21b119afba2f0b5a28c75e6cbc3111736c9ec", 0x3b}, {&(0x7f0000003c00)="ef6694f4", 0x4}, {&(0x7f0000003c40)="1776f23987289fd380bbef003d58336a7a3c04fe221e8d606843bb682f49f425230d2c86dd86ee556a9e4158a67d29e65c3934ad3ac52393d578f03924041b2cd29fd628b430769365", 0x49}, {&(0x7f0000003cc0)="4c862e48bf19c4d40347212b42817c4d7fe9eba5c5b16b7b319491334c54", 0x1e}, {&(0x7f0000003d00)="248cb033a05751cb3c7219631f82fe284099d863d157208ccc3cb897e181d08490827c3327c02e0f2979afd260288dd5a1cf278f9894dc2faead6806718a997ad4c9432880d3ce65dc434d224e163bd7896a423c629e44c1a89a12676faa6ae88740f75bcc03828b5578d8303fc6eaea3931f4834c679c12d6b8", 0x7a}, {&(0x7f0000003d80)="52040c34ae3dfcc4b98148ca58f608d03c9347c65d43d065a5367aaa08635471af0c6e73aaa59f185f6abf3b5479ed15ab9eb9b3ee94982efc630acef919a7378edfe56d9ab38f4fbb0a8b39bc568738414308bbece0e688349ee7", 0x5b}], 0x6, &(0x7f0000003f00)=[@sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffe, 0x81, 0x2, 0x8000, 0x0, 0x6, 0x4, 0xf3fa, r3}}, @init={0x18, 0x84, 0x0, {0xffffffff, 0x9, 0x1f, 0x4000000000000}}], 0x48, 0x40000}], 0x4, 0x20000000)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:16 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1c8)

[  710.352002] binder: 3271:3327 Acquire 1 refcount change on invalid ref 0 ret -22
[  710.359663] binder: 3271:3327 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0)

01:32:16 executing program 5:
r0 = socket(0x2, 0x20000007, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  710.426011] binder: 3339:3340 Acquire 1 refcount change on invalid ref 0 ret -22
[  710.433634] binder: 3339:3340 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:16 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0xfffffffffffffff8, 0x4000, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x2}, 0x0)

01:32:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x23b8)

01:32:16 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x840)

01:32:17 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x700, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:17 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000000)=""/251, 0xfb, 0xe1fe99e41a9eaa67, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:17 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1578)

01:32:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)

01:32:17 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x37c8)

01:32:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6180)

01:32:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0)

01:32:17 executing program 5:
r0 = socket(0x2, 0x803, 0xfffffffffffffffe)
connect$l2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x0, 0x3, 0x2, 0x1}}, 0x26)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'ip6tnl0\x00', {0x2, 0x4e23, @broadcast}})

01:32:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x160d000000000000}, 0x0)

01:32:17 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x26000, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5)
r2 = gettid()
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080))
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x182)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:17 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x85b0)

01:32:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0)

01:32:18 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x7400, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6f60)

01:32:18 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x10e0)

01:32:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x30000}, 0x0)

01:32:18 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="8fad400fbcc1249406b927c793b5f31200008d5eb208cca8b06c1404410da7a032925037e0253dcb4f1efa1f02758c35af", 0x39cc3ccb, 0x80000000000000, 0x0, 0xffffffffffffff6e)
modify_ldt$read(0x0, &(0x7f0000000280)=""/4096, 0x1000)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@local, @rand_addr}, &(0x7f0000000080)=0xc)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:18 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x43f8)

[  712.053265] binder_thread_write: 2 callbacks suppressed
[  712.053278] binder: 3384:3428 Acquire 1 refcount change on invalid ref 0 ret -22
[  712.066300] binder_thread_write: 2 callbacks suppressed
[  712.066306] binder: 3384:3428 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x34000}, 0x0)

01:32:18 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x3}], 0x1)

01:32:18 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x47e8)

[  712.199062] binder: 3441:3445 Acquire 1 refcount change on invalid ref 0 ret -22
[  712.206725] binder: 3441:3445 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:18 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xf30)

01:32:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf}, 0x0)

01:32:18 executing program 5:
r0 = accept$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
r1 = getpid()
r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0xe69f, 0x4040)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000440))
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1)
r3 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003400)={'team0\x00', <r4=>0x0})
r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0)
readv(r5, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000004c0))
ioctl$int_in(r5, 0x800000c0045002, &(0x7f00000000c0)=0x7ff)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000003440)={r4, 0x0, 0x7fffffff, 0x7b, 0x5, 0x0, 0x2})
sendto(r3, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ion\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={<r6=>0x0, 0x88, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x1}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x3, @remote, 0x1}, @in6={0xa, 0x4e23, 0x101, @ipv4={[], [], @local}, 0x8}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @rand_addr=0x800}]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={r6, 0xd3, "10caad314a1b12151e89839fe81c2e7a4e3e12ca8dce310559b5ca4410e10e994055d7735a1f511b5fe8844271393cadd6f9a10628a952d87c4a930bcfc0505a16c8b58df5d6523767df24c146ee3d5b16263459e40c6b0c7057053f5669ea74e63e00b056a102356ae1f3b8564e6ee9021deb8bb42d3daac37303e56ab2290b345a400930709b1800346046ace7f8263bdd8766e640a24d93b20144fbc799484c616a21b52aef3e92702414ad14f7714b5f9b635e51b4d10365f489b548a07c5cc5227797da9fb6c4b0b164663b7db1dabefa"}, &(0x7f0000000380)=0xdb)

01:32:19 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x500, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2838)

01:32:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0)

01:32:19 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x55c8)

01:32:19 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5448)

01:32:19 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x4000)
r0 = socket(0x10, 0x803, 0x0)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, {0x8001, 0x5, 0xf0, 0x7f, 0xfffffffffffffe01, 0xca}}, 0x8)
fdatasync(r0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  712.948226] binder: 3441:3482 Acquire 1 refcount change on invalid ref 0 ret -22
[  712.956052] binder: 3441:3482 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:19 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
socketpair$inet6(0xa, 0x1, 0x5, &(0x7f0000000000))

01:32:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

01:32:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf0ffff}, 0x0)

[  713.060685] binder: 3488:3503 Acquire 1 refcount change on invalid ref 0 ret -22
[  713.068392] binder: 3488:3503 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0)

01:32:19 executing program 5:
r0 = socket(0x10, 0x6, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={{0x2, 0x3, 0xc, 0x2978, 0x5, 0xfffffffffffffffb}, 0x0, 0x8001, 0x400, 0x3, 0x800, "d3d325c9c557efb6d292864a1cf69b81a2b34154f79e32a2a478f538758bcd96679c0603c651e0ca4711e2440208339139a77a5eba6a5f88b398470162702844cbc8eddda175f68936dfb2cb3b1abd19498db798ee8478daf17071ab7c9e895af8e2d256437c9e305412f3199abac21fc3ed5df4172b4cc8a25296e396b2c555"})
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:19 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4a28)

01:32:20 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x2000000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf0}, 0x0)

01:32:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2418)

01:32:20 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5f58)

01:32:20 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffff9c}, 0x30)
getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000280)=""/205, &(0x7f0000000000)=0xcd)
ptrace$poke(0x5, r1, &(0x7f0000000080), 0x3)

01:32:20 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3cc0)

[  713.802550] binder: 3488:3491 Acquire 1 refcount change on invalid ref 0 ret -22
[  713.810264] binder: 3488:3491 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xd16}, 0x0)

01:32:20 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000100)="120000001600e7ef007b00000000000000a1", 0x12, 0x400c0c4, 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/47, 0xffffffffffffffd6}], 0x100000ce)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={<r1=>0x0, 0x9e, "1b23bc5caf76689a8f2a64503cf22ac78d9bd43c8084bb39760eb02f30c9232f9fa222d512b71c3a34b7dc9d26aa947ff13364935bf52934b21511b87d36454422110dacf6429391606654bfc662ba08cfe789c9bf174afa384424218232caf2e9bf22d69b24595d98b67306c34dbf384d3d0b8fb1db1a87b68835a9fc095f8a90db0384984d6ce398bb4c2d62f2dde1562df03e00866bcf6fbe37f52f31"}, &(0x7f0000000000)=0xa6)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e20, 0x3, @loopback, 0xd7b0}}, 0x3f, 0x401, 0x81, 0x7f, 0x10}, &(0x7f00000000c0)=0x98)

01:32:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0)

[  713.948944] binder: 3548:3558 Acquire 1 refcount change on invalid ref 0 ret -22
[  713.956634] binder: 3548:3558 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0)

01:32:20 executing program 5:
r0 = socket(0x10, 0x803, 0x2)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x895e, 0x101)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xfffffffffffffff7, 0x100}]})

01:32:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6ca8)

01:32:21 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x60000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:21 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5da8)

01:32:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0)

01:32:21 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="3c6eb4f42aa82ca9fc5a13e6f0331c055eedb863a8ce636bc8a794db9761e04e84d63bbaa3ee0775db91d377669c8f8762db2d73cb22ddbff8dc6a136f1c1f865f5a4d43f634bcebf1e882b2c5e47c319388f0dd12a5fa0cbc625a6b9f75247f523f6b0cb783627d134a4057a54974fade75137c4cd548d101dc27bf99365da2aba10af41f7cb0f269f095e2773f9e56def383582be5167ac4a8c5a38b2430937552b33e4d875d0e84e6a5d2c556b1101761ef0a7022ea174efeaf64e08dd5db56415abe7c4ff85bcd7bc3d3c6ff6ff0e4fe691996f67011e9c7a19f", 0xdc}, {&(0x7f0000000100)="34542b7009477dc0ef4119abe2294d14f2fcbe", 0x13}, {&(0x7f0000000280)="a6fe5090edd45a044f6678d9e7222cfbc50a2a323001f001e6919f442d2c65731c3ec62342ef7f9cc053c3bb5ce003e81007af0fa181d0c0f4e5d320c8faa8a4aae236d3d4a4fbb7303f0c65fdedc888b17c7bda1c99c6c3e585ba158abe9e7fe85e84788dbcbf33499fb6a7a1391f0ddbc929ac5e85307d57925fb4091c08336117e26e46afd4b29b72a8adf386cbf9831a8df412e9d3b5dbcaef0311f6c9ba8136b8c250795ea28e89998f2217a4da5db0096383cb9b3faf7d8d2c2cc5b9029a47965cc1f13484a07139c69f969806798275a8290134fc2df9b874118e", 0xde}, {&(0x7f0000000180)="2dd9b1fb6c01d44c6a3f60a3355e49c7e475d097e9150ae3b1d52e81e147e6d4086028eab869e4190aeaba89c779524744e21f1fe9558c7d83a765bb99a400c891709ce909f9adf0cbbd39015db24dce4d489a2abda296e4c714f45484ade08631c118717f1d59fe15730097e858", 0x6e}], 0x4, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/47, 0x2f}], 0x1)

01:32:21 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x54c0)

01:32:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6558)

[  714.693033] binder: 3548:3583 Acquire 1 refcount change on invalid ref 0 ret -22
[  714.700748] binder: 3548:3583 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0)

01:32:21 executing program 5:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
fadvise64(r0, 0x0, 0x3, 0x4)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0x7fffffff])

[  714.766628] binder: 3597:3599 Acquire 1 refcount change on invalid ref 0 ret -22
[  714.774267] binder: 3597:3599 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0)

01:32:21 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$sock_proto_private(r0, 0x8000089e8, &(0x7f0000000000)="7f00294ad56a6c6cbeee6a11632fcfcc97397c3d64185a0008000000000000aed91b")
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x160d0000}, 0x0)

01:32:21 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = gettid()
sched_rr_get_interval(r1, &(0x7f0000000000))
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:21 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0xffffff7f, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x160d}, 0x0)

01:32:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2088)

01:32:21 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x41a0)

01:32:21 executing program 5:
prctl$setname(0xf, &(0x7f0000000000)='selinuxtrustedselinux%\'eth0\x00')
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:21 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5058)

01:32:22 executing program 5:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3f, 0x208000)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={<r1=>0x0, 0xfff}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f00000000c0)=0x84)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x20004010, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
readv(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

01:32:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0)

01:32:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5328)

[  715.694171] binder: 3648:3652 Acquire 1 refcount change on invalid ref 0 ret -22
[  715.701842] binder: 3648:3652 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:22 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3f30)

01:32:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0)

01:32:22 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x7000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:22 executing program 5:
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='raw\x00', 0xffffffffffffff9c}, 0x10)
fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:sudo_exec_t:s0\x00', 0x21, 0x1)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
sendto(r1, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8)
setfsuid(r2)

01:32:22 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x34b0)

01:32:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

01:32:22 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x53d0)

01:32:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6858)

[  716.420304] binder: 3648:3682 Acquire 1 refcount change on invalid ref 0 ret -22
[  716.427932] binder: 3648:3682 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0)

01:32:22 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x3823})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={<r2=>0x0, 0xcf, "efc0e3439bb11eb206bbe2037ff8dc1acdeb78479a8320d1d55a5861911c635c4154f20164bb8d32b0cef851d522e47e479d22ac449f34009e5d942d38c17558ab9bfa135f0e430aabee7edf78ab74dcb7236621c060df14d4238b4c22767555cd074c087ec153ce0be15a70a1f4355a085ede32447423b739c7b36f6bf926eb315dc78ac1a4a880263bf0ba0b50d595aa1b6efa3dfd0bbda4a2b4c72dde0036b74234f1378068b8da72290cf787d7e079c8c43d8c7f4ca5d058050d80c967baf9d39ca897a8b547bac95fa6e30d54"}, &(0x7f00000000c0)=0xd7)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380)={r2, 0xab, "8794ebaa9b47a0bc959272d95f93250a3d45389c632a69eb81e79e31e62fb16b73d3ab2961d4641a5343de5387943b8c6ad826e270bcdd66cf803aba817ec9dcc7b0ebfda204d5a37e6ddac980754bf2254b6ae4b79a1c383ba205bfac8e25505345c4fd3650460a6c8b0f990ba6285d517b8982c1476c1b12edceeb96a4552f32b09c6cd5eb7a7148c2da044ec6779d7b15b8843f0034e05a453f582612702340b23ba18add47ab99a24b"}, &(0x7f0000000100)=0xb3)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0)

01:32:22 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
socket(0x0, 0xa, 0x1)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x3f, 0xfff, 0x0, 0x2, 0xdc, 0x9, 0x2, 0x200]}, &(0x7f0000000040)=0x14)

01:32:23 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8160)

01:32:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xae0)

01:32:23 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x68000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

01:32:23 executing program 5:
r0 = socket(0x9, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:23 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4428)

01:32:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5aa8)

01:32:23 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8a90)

[  717.289778] binder_thread_write: 1 callbacks suppressed
[  717.289808] binder: 3693:3736 Acquire 1 refcount change on invalid ref 0 ret -22
[  717.302820] binder_thread_write: 1 callbacks suppressed
[  717.302827] binder: 3693:3736 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

01:32:23 executing program 5:
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="12000000160007f0007b1f000000000000a1", 0x12, 0x0, 0x0, 0xffffffffffffffaf)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x1e}, 0x9}, {0xa, 0x4e24, 0x9, @mcast1, 0x400}, 0x800, [0x4d, 0x1ff, 0x1000, 0x1ff0000000, 0x0, 0xfffffffffffffffb, 0x177280000000, 0xd5]}, 0x5c)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000180)={<r2=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000001c0)={r2, 0x2})
readv(r0, &(0x7f0000000240), 0x0)

[  717.404064] binder: 3741:3758 Acquire 1 refcount change on invalid ref 0 ret -22
[  717.412388] binder: 3741:3758 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

01:32:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

01:32:23 executing program 5:
r0 = accept$inet6(0xffffffffffffff9c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={<r1=>0x0, 0xfff}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r1, 0x1}, 0x8)
r2 = socket(0x12, 0x805, 0xfffffffffffffffd)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x3f, 0x0, 0xd27, 0xff, 0xff})
sendto(r2, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x20, 0x8, 0x1, 0x9265, 0x7, 0xffff, 0x1f, <r3=>0x0}, &(0x7f0000000080)=0x20)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x24, 0x5}, 0x90)
inotify_init1(0x80000)

01:32:23 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x38e8)

01:32:24 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x5000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x76b0)

01:32:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0)

01:32:24 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1a40)

01:32:24 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x2, 0x368, [0x0, 0x20000280, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000040), &(0x7f0000000280)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x5, 0x1, 0x0, 'erspan0\x00', 'tunl0\x00', 'ip6gretap0\x00', 'veth0_to_bridge\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0xff, 0x53063510d8f094da, 0x0, 0xff], 0x120, 0x120, 0x170, [@helper={'helper\x00', 0x28, {{0x0, 'H.245\x00'}}}, @arp={'arp\x00', 0x38, {{0x307, 0x800, 0x3, @loopback, 0xff, @loopback, 0xffffffff, @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xa0, 0xa2}}}]}}, @common=@log={'log\x00', 0x28, {{0x10000, "6792f205426b2a26ee8f62ab656b6b37bfe43d5e85ce2e5db67b31abd5c9", 0x1}}}}, {{{0x7d33aa90cd347ae1, 0x2, 0x68f7, 'bridge0\x00', 'ip_vti0\x00', 'bond_slave_1\x00', 'bond_slave_0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0xff], 0x70, 0xf0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x1, 0x80}}}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@ERROR={'ERROR\x00', 0x20, {"369c7ba4acf1d4fdf984894e6ea4efa02cd128f2a45ac2fc0d216d98207e"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x3e0)
sendto(r0, &(0x7f0000000100)="1200000016ffe6000000a100000000000000", 0xffffffffffffffb9, 0x4000844, 0x0, 0x208)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x0)

01:32:24 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5fa0)

[  718.151244] binder: 3741:3793 Acquire 1 refcount change on invalid ref 0 ret -22
[  718.158858] binder: 3741:3793 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0)

01:32:24 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0xbd1c, 0xfffffffffffffffd, 0x7ff, 0x200}, 'syz0\x00', 0x30})

01:32:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000}, 0x0)

[  718.280042] binder: 3798:3817 Acquire 1 refcount change on invalid ref 0 ret -22
[  718.288030] binder: 3798:3817 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:24 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dsp\x00', 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000780)={<r1=>0x0, @in={{0x2, 0x4e22, @local}}, [0x8, 0x9, 0x3ac596c2, 0x9, 0x0, 0x40, 0x8, 0xfffffffffffffffe, 0xb8, 0xff, 0x3, 0x0, 0x5, 0x3, 0xfffffffffffffe00]}, &(0x7f0000000880)=0x100)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000008c0)={r1, @in={{0x2, 0x4e24, @loopback}}, 0x5, 0x3, 0x1000, 0x9, 0x40}, &(0x7f0000000980)=0x98)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000005c0))
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0xffffffffffffffff, &(0x7f0000000100))
r3 = socket(0x10, 0x803, 0x0)
socket$pptp(0x18, 0x1, 0x2)
pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)="2fd8f9550257d9db8871adcf8410ce", 0xf}, {&(0x7f0000000040)="f7c195280fd9bdd2839bda278303bdd3e40c35d3884262538adb04a77c5a75918304bc5ad5a60f3cfcc086db746791ec2f18fc0ea3b4665365632895abe70d7176d2dab4c44ef46096d8c6616bd2148eeea538767703eb188aa128e1a6029644aa8efbe4c3", 0x65}, {&(0x7f00000000c0)}, {&(0x7f0000000180)="543669485bd79d8312b4b4702c8bb9ba8624d9efbba2c1a037a47acf01de02d87135bfd590dcf1521858b635bfd06730d32c86e9d8be4fe5a00d05a3647e903091f1599318328dfd9eca7e699c2944aa45a2c2d8", 0x54}, {&(0x7f0000000280)="e87ed8610707e3ce1c1cf9fae9a33a15dfde33abf941b84b05ec1c7b5e3ec8cb54ab95f39cbdf0125a3f245a410256277053d15bbb5ec54aa867923e7d1e7e49b57448", 0x43}, {&(0x7f0000000300)="962a520231789f85da395084cf64096eb23b2c71151105f45c25b2c0fbf645d144f5cf7d445452877a576c23ecc7ab52a827e7746bd613f7579b50bcf3e112eb2194c1de11dd93e33b94c248546a6e8598da6ea4a96d22e84b8bd84f19ff350fd138a8c4bed4427670b0d13175b35927fdd3ca8fef135e4936dd5b628c04cf46ed17c3c43dbd73701b89180e5906cd47725306b3477988f14e495c27", 0x9c}, {&(0x7f00000003c0)="10b92738c824c6e7bb6967101e8a1006bf62c0ddcb04c649c4ee60c4ae17011be541d6367e439b4761273ee7d81f053330fa8729de19071b573c5a93314de90cdb6539dddb1d82bf9d82221673636d56348ee89b4f363a59db32a947b3f6f782c8254d8ee6432fc5df4062ee4be56017b4b49882ab902f170a51034be32b39fb3df87de4a628732b68d53c44ab8e", 0x8e}, {&(0x7f0000000480)="c2089c5ff8eaa7d755c70e9df6f7a6ae315a5011839aae0c4c5af229977b53bfbaa5a58fe9d5438aa4d0bcd221113df1207202f2a7664006f4805e61917c52c0ebd6df251f3465c67a2c0aa6d785f056e884ae3ef780ff8e6133ecfe16f35735a915ac6fab4b2fe942f63edc5d4d66642039b572865c08769786bfd42a3d5718b1e209decaba0a924a654bd4898610cc69b61413", 0x94}], 0x8, 0x0)
sendto(r3, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r3, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x160d}, 0x0)

01:32:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

01:32:25 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x6c00, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:25 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4e90)

01:32:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0)

01:32:25 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xe28)

01:32:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4bf0)

01:32:25 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240), 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x60)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x100, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000180)={0x40000, 0x0, [0x9, 0x5, 0x80000001, 0x8, 0x8b8, 0x0, 0x9, 0xbc6]})

[  718.999693] binder: 3798:3842 Acquire 1 refcount change on invalid ref 0 ret -22
[  719.007354] binder: 3798:3842 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

01:32:25 executing program 5:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  719.070676] binder: 3854:3855 Acquire 1 refcount change on invalid ref 0 ret -22
[  719.078332] binder: 3854:3855 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

01:32:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1b0)

01:32:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

01:32:25 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1398)

01:32:26 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x3, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:26 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5430)

01:32:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0)

01:32:26 executing program 5:
socketpair(0x11, 0x80006, 0x5ee0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={<r1=>0x0, 0xd7a3}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="ed00000066d88884e1243416499c4b47f45f11c2436b7efb13151fa7467911d77c7a7bba86c0051215e0fa8f444eb49b81c9731d1e93ac2110d880c53068786d11f20c8b2f1530d97152d01f416c10a051194b0d214910a72c8547ee153009f3cee07cb4c417c5b11cdc875b33e9ad1d6efadd938fc9d23a3ad760a484bcf371418185d16756272038ff2f80c64000d3aba74dc28f46783995924e723d842622f78bebbcecf2d36877306bd16ce647b5e568b217341df98556b219ab0c9ce09c786d017ae002838e44440e5a28ecdbdb0d2a30d210d4444c30ebaab5bfca00000000000000000000000000000000000000000000000000"], &(0x7f00000000c0)=0xf5)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={r1, @in={{0x2, 0x4e20, @multicast1}}, [0x1, 0x0, 0xfffffffffffff38e, 0x6, 0x400, 0xbf9, 0x448000, 0x5, 0xffffffff00000000, 0x0, 0x5, 0xc8, 0x0, 0xfffffffeffffffff, 0xff]}, &(0x7f0000000100)=0x100)

01:32:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1530)

01:32:26 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x318)

[  719.862476] binder: 3854:3892 Acquire 1 refcount change on invalid ref 0 ret -22
[  719.870129] binder: 3854:3892 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:26 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0))
sendto(r0, &(0x7f0000000040)="120000001600e7ef007b00000000000000a1", 0xffffffffffffffd8, 0x20000000, 0x0, 0xffffff38)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

[  719.964812] binder: 3898:3915 Acquire 1 refcount change on invalid ref 0 ret -22
[  719.972498] binder: 3898:3915 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:26 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = getegid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000340)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, <r5=>0x0}, &(0x7f0000000640)=0xc)
syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="21fa9ace9e9f108c41f49ce2fa3261e4b5494f964c31e6d96aabb45f270c9e601b81c8a01e173f33462028048546071d4c5fc22e69860325d0fe6a69a0dd02bcad74e7ec6dc308e9e3bb", 0x4a, 0x9}], 0x4808, &(0x7f0000000680)={[{@gid={'gid', 0x3d, r1}}, {@dmode={'dmode', 0x3d, 0x9}}, {@gid={'gid', 0x3d, r2}}, {@check_strict='check=strict'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'wlan0-trustedppp0vboxnet1]'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_gt={'uid>', r3}}, {@smackfshat={'smackfshat', 0x3d, 'keyringppp1*+'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_user={'subj_user', 0x3d, 'lo'}}, {@fowner_lt={'fowner<', r4}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit='audit'}]})
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x9, 0x0, 0x3, 0x1, 0x3}, 0xc)
r6 = fcntl$dupfd(r0, 0x406, r0)
ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x7fffffff, 0xfffffffffffffffd, 0x9]}, 0xa)
write$P9_RLOCK(r6, &(0x7f00000007c0)={0x8, 0x35, 0x2}, 0x8)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x40, 0x4)

01:32:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0)

01:32:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x30c0)

01:32:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0)

01:32:27 executing program 5:
r0 = socket(0x400000000010, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:27 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8340)

01:32:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0)

01:32:27 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x48, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:27 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5610)

01:32:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5ee0)

[  720.714681] binder: 3898:3944 Acquire 1 refcount change on invalid ref 0 ret -22
[  720.722314] binder: 3898:3944 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300000000000000}, 0x0)

01:32:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

01:32:27 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="002fe4e0003adf0000000000000000f6ffffff", 0x13, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

[  720.845695] binder: 3958:3969 Acquire 1 refcount change on invalid ref 0 ret -22
[  720.853340] binder: 3958:3969 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:27 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="b9e3ead634387bfe6118e98a1ffb5af5", 0x10)

01:32:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0)

01:32:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3b40)

01:32:27 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x528)

01:32:27 executing program 5:
r0 = socket(0x10, 0x806, 0x1)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
readv(r0, &(0x7f0000000080), 0x31c)

01:32:27 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x7a00000000000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:27 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1bd8)

01:32:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400000000000000}, 0x0)

01:32:27 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000180)="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", 0x12, 0x0, 0x0, 0xffffffffffffffef)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x200)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000080)=0x7ffe, 0x4)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x9, 0xffffffffffffff41)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/83}, {&(0x7f0000000140)=""/51}, {&(0x7f0000000400)=""/208}, {&(0x7f0000000500)=""/61}], 0x100000000000021e)

01:32:27 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1530)

01:32:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4968)

01:32:28 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1000, 0x8000)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000280)={"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"})

01:32:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0)

01:32:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x160d0000}, 0x0)

01:32:28 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r2, @rand_addr=0x7ff, @remote}, 0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001580)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000001680)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f00000017c0)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001800)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000001900)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001940)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001a40)=0xe8)
getsockname$packet(r0, &(0x7f0000002040)={0x11, 0x0, <r7=>0x0}, &(0x7f0000002080)=0x14)
getpeername$packet(r0, &(0x7f00000020c0)={0x11, 0x0, <r8=>0x0}, &(0x7f0000002100)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002140)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000002240)=0xe8)
getpeername$packet(r0, &(0x7f0000002340)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002380)=0x14)
getpeername(r0, &(0x7f00000023c0)=@ll={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002440)=0x80)
getpeername$packet(r0, &(0x7f0000002480)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000024c0)=0x14)
accept4$packet(r0, &(0x7f0000002500)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002540)=0x14, 0x80800)
getsockname$packet(r0, &(0x7f0000002640)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002680)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000026c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000027c0)=0xe8)
accept$packet(r0, &(0x7f0000002800)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002840)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002880)={0x538, r1, 0x302, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x250, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3b}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x200, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}]}}]}, 0x538}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:28 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200)
getgid()
write$P9_RLERROR(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000ff070100040070707031"], 0xd)
ioctl$KVM_NMI(r1, 0xae9a)

01:32:28 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1e30)

01:32:28 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x3000000, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0)

01:32:28 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4c98)

01:32:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x74d0)

01:32:28 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xa080, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000240)={0x1, 0x1000, "44447bb40b869089ec83e9cb17ef4fbc22c20d2d232a0009b1a51eda0e4cd2f3c883fe0a885259706b8803ba0a7091d0f61124ca03eab1c644e5120adc75411bd116cd99712470dfa1bf6a4149a21ba97a6967d3ac2c6561b0df7f20dcd80dfeded7d742a868e019d6ed2a91774d2c16068057758f9f808daf1e26f69068679125f3a8e35bfd770e06ec214d252e4b26333d012fc4a4fcbc06b21ad7217bbbcc63aa0083193564a57fb0fa42088002a83da41e986588da60e3a7cd415459e4a46108e24b82fe6797539a3b13b5d07594272ab952a841321b61a2d1379bf5fa7ceb894fac4ec30439eb6aad1ca4d88999143a929da6471821ffa7b89146959727dd7468cd8d3caf2df434c1ec81e92a5c3a9b7efc78a756d823458caf4b68d76ae8ca83325d3ac538c82f05b78fd23e1fe32fa69ba9b26216da67dcccc9e0575f894289a47224ccf2ae8bc2c56a9f887f3f0d4f8e4591a2c8a3e6863d4945f839494b24fc549f4b294feb8f36ec3d1c4efa4ba249e81422ac42621bfa2d7695650fd303e864dd174931127e654aeb300778f174934b141ad72c8eda68a68499bf8c33b49390f718df356bda65362ecaf0d554cbb70762c1cbc10530091eeab413150f38c627872c4e220ebae024d51d1d63b1e7715de943fc0b10466e4eec6653640c292e95061a6a39a0d5738c3adc240b9bdc9a63bc063731828d4dbeecf61f9798a129d189e033af919838535813de626aaa1e6278a34a32e565d08485ff30b5eb0dcc76d3a582f416eb0f8a3a912a6d1ec0ce3878015e499605e89261cee1a8ea27d35656da425715971d24064eb7a9320222c888531b62af00576389eecdc4bbc25a15d61b8f4b8cb29e2c98021bfb5779472655a8fdce6dc59e83be30e5d2f9562b9c41848d34461d256bbe478c76339d07d316a35c2f431d5ada8b07011e458ae5b8bcf3bc9697cf240ac12d1328f30660c0f559c9beb48cb73e442ca9c8ac977420e87b97b8eb97a7564a01ba936d85c765a815dc6c49044b488c6642110b94426fd4f74ae92d5e6c9c99129990653bedd392c2201c5378f7ef48063fcf0c1ff6cfc76285e82bc495cec19433c4b53006b1abeac4db7dd2ed9138fc74e645b62d1cca10f7e46ef91aa0fa19265b6f3eb50da8ef0624c54d870484b67db3bccb0e913cb1ecc9f6b3aac01cfbe21c3b87cd1b6f78d9e90fa7deb2bc2d2c2c12008f5f77b64750239c81418ee6296842b73b026bae3ed4d83bfd060303eae67e89d781ec8d712cd4255571c1dd13157894ffddff585ef51012e605c31dd0ceffd8102b9f0952e7f20988fa630a460f6dd4d0775a8497a21cd4186903fa775f4df05b000c1ea8b44eeb78f45b9327f56bf67f884294befad4e5c41eecb0108e9755eaa57df247efeaae4f367894de34859fdf5689ab24d8c49504f036589fcc45f9cbe5eb71f88cf7b8af25ba39dc949ac327599092238b1935e38083d4aa43fc7c588edefa0dd2955df7c2ae556025cdb6131660c61b072bdc4707064d7e33859ed3bb281328a7fa39dac1e1a8c11890562ecb9774e36e56447196b63b927bbe645857fba3286b8247fb36c59a8f96d730630702c1e82db5f4210740be9c14750e2e0ea7eda354bfe7c637982d7009a64cc250834ad60832bcb8b73fa386fe3c4beb56b842af748c2d37ec547ac703d022a0997eba6b02e8496d11e930ce02d2c7e9a692e9cf2454bb01b16b1ff6ced99516b1a809ed167aec6f37244065204b9693c00dcfc80417f95183667826442c9e280048d9228b0c4488da3d7ab224be6b579b4a4542bba7e8a0c61e498193d3a5bac13fb530ad18aef7f3526402892b0ee40fd5274b0e22c08c2e813d6817c9c4e201a4ba6656d7e0a58429f1666bb91025e80eabaf49659879e11aa0dee46e7271667e49307b20f12923c82077ce388725f52d1c5c0e33ec12322bea0048abc5150442bf7ea53d6fd933333a81d44c044d2d17f9a65726cf951b20661a0b522b1cd7feae1269a247ec4aee15e12dd4b5ddfe016f14cdbbdc7cd4b222c0c1860a665ace912cbf1b6bdff31a80a6da045f81184fc60a8f9e698bfbf7129810ba0dca5555d0bda85f52c105b456057457b017023e1a36c13bd05e31153855ddb54b7493196cc4d917fdff14a13747251c3cc9c8099bc01495953febe4848a1ff88fe2b21fe2e85f90c052a4c095a9cf832fa5c7e0e76a7e9990a3528779596d80aa9626a393211ff4e7df79de92ccff6db36960f3eba9500426171e180826ec0b9967af94328373df6a88af39b96c23de3a585dd777d52834cf16e45ca5b411925fe0b68750a77544176c9507d52dfcc50354f4fe4f91140335318889935f4e8b601baef33300d2336ed69c699f999fa926e745ea26560ca37c08cdf3b02e728303817573e5de6a112d723310449d7e26de6161fdf7fcae0717a2a58eaa177d0b676783da38f3c084bf70cbba93260e1fe81c7143f9257d90268a5a332560acc119009a4d1523687df4879dd59b379229a0a22cd5c8e051064eea548e693a1747bdd54882759da85e02a6281bb3865ce7e236759bef063d1a9171bec3b76482659ae04ed1cefde46b08c8c793ec9aa503146aa4f66c983819456b46f104d6f89e96b3b2391577b6958c005499ca2ce5576334b2f5d6ee2b5c8030a7f9bb4d40c998fc97120724eed62cc268485e2edf20766eb5ddd25fca36d045edd370edf6c0a804f8af65a568f5a9ba5b7af0ff195fb1492a59a37c666aac4ff03c478408121b8c658e1ba276fdcca0d1ee6a7e66f9a9f8ae91cff4115624609d1d108d49443ce3a4217b9d3a1ee04ad5e00f7f648258947e7c808f1a8f19da9132d49f79393cbf1a205562c7c47c70796f155234629f18020a61e3df44fac839c0955dbd9c8ffa70be0288fcbde64205d435433f77c8d5250e8d043b12e9fe9e3ab4c4416ab2378b4659986690dc962515c92cbc337c9d1f69078f39b4c939dd00e8ca4ff178a78310ba45af3618590c7d392af234685ebd4dfa290c4bd478e5d824ea257439155494de357eebaf25f13da28ad06f6f60dc7f7c86bd7e797e49e2a2ccaf8ab79c1149fff154b21649237f9f705ba92a08f8e458b6aa8f0cc8d263a0dc0bb2c661dd5cdc175cd0f35c89aaa96b62436b7864dc6343d74514b0fc76a37c10c5da5f80ff39453829c2ba67734b0d534d9830e2f4b390a0705069d369405e0ac49e0788b27d52c38866b54431cc74499f2081aa4176620544cd4a63299e87d637e3148be8e8ccf50cb62dd97e5e14839cfef1f868bbb08f135f8cd0afebb34ea6df4cb05d014e88fa83b5b83260c2e32986237b846bd7288c1a36ca4b7575edd63417ea358c6f0d2d3c670f78377bf3f093a47d4cf00c4bfe216de875b85171b009b0e132eaa3880ff2fd94985f81d207aaafb1449a1b4f105c6de9a8a125ef6b50bd31aa7c61f1c6474111367c47d0c3f45b927ee1370a9a1d5c3b2855980ef15ddc410e5b0f4b378f61629d9085336ee77856b44b0873dc019a5544f7e934fb40038a6b01521a03087df85ba5839d86338f3d525e047b096eb08ed76142cefb5290df48991c85492aabe3c36959bdbc0dc8602c2fe3bd70d857f28bb5d586652c8610c5e3ec60d1e49e39cea80481803091a65bdcfa23196c544bea0ca758bf80a3137405f6cf705e356cdf2e4f36a73b5dc830ed1cdea2d515e88dd2dafb20e9a043d1e7339ca4fc94a5df9da9d78dee37214c186bb307f67528a4d6f41783eb04627fd4edc9324026411eb9f7c83a862ebe6f3725b5710d9037495ca1eb843f36f50adc00ac2ca78282b2d45e586c086f26383ab515bb002441fa01cc38486a786b4dc3906e23f42ad9745248cc764f1a293c38675a20af743a8688b5fa6d833b0c34eac9f32301f2d8f8cec859a35b1d8206f1bfd19381525f9a28540d542345d83c44b3b6925292302e47bcebf8044a7438fe44ab9211fd0f83a0740c831deb253d438bb4b0cc61029bf61719f1dd90637409ba327482e115dc4bb9ca5bdfb090dfa01423e5d4d4c896f75ff4f0ef6297c604a5661fd9329eac3d3914d4aec3104583b1a445571946b4011c791ca193e1b933ec7869ef60bd446674e1bba17a1f09180d776a35cff486b959901675e36c1d30640128be10d52dd2079da786368cc0bdbf203927c5c3980b40cb72a8babb60e2048cc66271cdf728c2348c83f3a4b3a747e352230f9d7975f5bcccece8c55c590f8f8f90dc9f92c5c4f9d626314d13dfc0764d1d440d9a085bbca41c347fa65039da5090ea9b7a1dbe33a9618cc8fe68e38518d59388dce2f81802b0b6c4b9744f4dd4ee8eba85c656ae49d44558d0474a7b3af3739a9f09d4e2f3fc74a07045b768b54b22a5fa852a1359f467fb65c623bd3af27b3dba60e940fdea1d03efe41c1e919663ab29d8c55a4681cfab31e28aef91cbbdf60706fbf5229d0fef3f2940217c9c49a5fc8a8881a5a2b159c5a693be5c08292f6648e8f4114c47d5fb033b27e4be81b9002e111910b988577113ffd55f5e2bf0047d08afd8054f667adc9b61f64e0f5395720760b413ec8ca2947ea9895a08506aa1004f22c4a43fbd1e5b4fd9c84bb4736d8d79a7d04e679a492341cfb5d2fb58898efe7f05e5a08439943284dd558d693bf3dffcda123f5ba6fc6581d2139d70d8762a3c1987c402b47d9f863c178d8aa81b40827a1c04874ae27341fec8030dce93ccfe64fe819037a26a2baf2efa22540342652f08a88a3a39da69a8231a74c2dece6e76766eed2497b73f8c5215650e6d3e6343c35948a39aae7124c691f3e6c4bd5f91f607a9758e1d018eda41967b127e120ec24c33cadef1edde9fe59b14a3795e3506256280d808403e1d067b1f1243d4c2dd2776102621fcb88618b16022020973504f5b177a1eaf91fcd72e3d92dc5e9c1594ea2c81e0b90f95c454b2ec230248f5a6bf8e0ce899e9184cb7df83bbf19de3ae58cb96c585a9bcd26dcdfea3ee8a3c6c97ff4b4c00e08b00cd60263685b591a65d445ace5949a1ee99aa066688b79572216033c3c8f39f0bc6320c03ad30be3b6c4a97d0c295d990037f64e72c6b40795d97d972041e9d5ac8d1c769f32fb1126151aeef8870bdc8027d11a85f9aaeaff8c414896b54439d3832f6882ffb3e75d6d1aaaf8cd2152ef85d2670ee1a077dce97f06f9dffde4c584a940e92a4eac64ff3f0c9117529794a6a5e067a86ae3391ea32933c1084996ac627fc6ec6316bec853e13fabb7bd866645f102ef1c5cd0c932eb8b75f64b0f176bb6983d81e8132e6060bea6c8704de2932b47a6d8c55be2b4dfe7d03b5924edc3392c6b4a1ba4c534c69f0c2197f959fd395083872deb294f37a840763bd007fe70f5d77e2ae7f96d4aaaa2bd18f7dd510ff3cd41c0c83f9a6501d689d3761a00abb7a74433707a009bc1ed0430aadc6822fc752707b59c89a70980e4a4dfe91f80cb77bd2dac381d9a928d619f6e457d0476ed9cf364bf68332cddefd2704f65d0d8271da0a56f52a965c7ff2b376ae5c33a1b7c0402a547030eba3609fd7139ea9ea0b1e8fc7b10b326d6602ec1beb16937391267bfdf25e1c793f6f4cce4eadc435832f386dcbc59c3c602af85c49949672e5351f90833c7d9f4dd1e1e6d4a2c354f14b0d70a7419fdc7ef05896b6341afb79e0c8f7c003079ac4ae1e80f0a845c33cb9bf1f9c1c3bdc1ce851a6f15691c8cdda033b255b8ca70ec8959ea7e3a857e560e9efd9b5ef320b1f141d2382"})
socket$bt_hidp(0x1f, 0x3, 0x6)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:28 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6060)

[  722.458537] binder_thread_write: 2 callbacks suppressed
[  722.458551] binder: 4020:4055 Acquire 1 refcount change on invalid ref 0 ret -22
[  722.471565] binder_thread_write: 2 callbacks suppressed
[  722.471590] binder: 4020:4055 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0)

01:32:28 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = getpgid(0xffffffffffffffff)
ptrace$getenv(0x4201, r1, 0xfffffffffffffffa, &(0x7f0000000000))
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
tkill(r1, 0xb)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  722.585233] binder: 4064:4080 Acquire 1 refcount change on invalid ref 0 ret -22
[  722.592880] binder: 4064:4080 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000000000}, 0x0)

01:32:29 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x400000, 0x0)
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x401)
write(r0, &(0x7f0000000040)="b8f289fc8ab8e682b10a635ff22d8bc12532c6c534641f3bfacb142b847c26a1230f500bc1cbbde2540ac224a388ccace1e78c360772c9dff60c5fe43228fd825430f17ffd622a52d1c391b15b0cf03a32c950b57bc93e0d4491dd5c6f1aa56016df9ebbca48a22bc5c7bee53f30bbe889147cc33df889dff723cc71704ba95230584b60b65217cdee", 0x89)

01:32:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4548)

01:32:29 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5658)

01:32:29 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630400000000000e630c409d9c00000000"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:29 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x75d, 0x880)
r2 = getpgrp(0xffffffffffffffff)
fcntl$setown(r0, 0x8, r2)
fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080))
sendto(r0, &(0x7f0000000000)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000580), 0x100000000000008f)

01:32:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x160d000000000000}, 0x0)

01:32:29 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x87d8)

01:32:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6a08)

01:32:29 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x19f8)

[  723.334439] binder: 4064:4107 Acquire 1 refcount change on invalid ref 0 ret -22
[  723.342040] binder: 4064:4107 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)

01:32:29 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
r2 = getgid()
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
getgroups(0x8, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, <r3=>0xffffffffffffffff])
r4 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x2000)
ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000300)={0x3, 0x7fffffff, {0x57, 0x9, 0xffffffffffff8000, {0x0, 0x6}, {0x7, 0x2}, @ramp={0x0, 0x8000, {0x2000400000000, 0x0, 0x1, 0x6}}}, {0x56, 0x80000001, 0x6, {0x2, 0x7}, {0x101, 0x9}, @rumble={0x1, 0x9}}})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000002c0)={@my=0x0})
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
getgroups(0x6, &(0x7f0000000100)=[0xee00, 0xee01, 0xee01, <r5=>0xee01, 0xee01, 0xee01])
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=r1, @ANYBLOB="040001000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="006901dc7d235e9c223c000000", @ANYRES32=r5, @ANYBLOB="10000400000000002000000000000000"], 0x44, 0x1)

01:32:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd16}, 0x0)

[  723.488201] binder: 4122:4133 unknown command 287493
[  723.493401] binder: 4122:4133 ioctl c0306201 20000000 returned -22
01:32:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0)

01:32:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1fb0)

01:32:29 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304206d9863134c6d4b44b7d42f68fc40000000000e630c4000000000"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:29 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x50e8)

01:32:29 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x378)

01:32:30 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000005c0))
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r2, 0x210, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x51ba}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xf533}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

01:32:30 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in6=@local, 0x4e22, 0x3f88, 0x4e21, 0x5, 0xa, 0xa0, 0x0, 0x3c, r1, r2}, {0x3f, 0x8, 0x7, 0x3f, 0x6, 0x6, 0x3, 0xa8e}, {0x7, 0x4, 0x3ff, 0x3ff}, 0x3, 0x6e6bb6, 0x857732405db58042, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x4d2, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x3501, 0x3, 0x3, 0x553, 0xffffffffffffecfa, 0x3, 0x73abf325}}, 0xe8)
accept4$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14, 0x800)

[  723.686324] binder: 4148:4150 unknown command 537158405
[  723.691815] binder: 4148:4150 ioctl c0306201 20000000 returned -22
01:32:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:30 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

[  723.752805] binder: 4148:4174 unknown command 537158405
[  723.758663] binder: 4148:4174 ioctl c0306201 20000000 returned -22
01:32:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x75c0)

01:32:30 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1338)

01:32:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:30 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0x5c9, 0x1, 0x911b, 0x9, 0xb817, 0xffff, 0x4d, 0x2d0, 0x5226, 0x7})
r2 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x84000)
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000001c0)={0x0, 0x804000000006, 0x6})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/47, 0x18}], 0x31f)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={<r3=>0x0, 0xfe2f, 0x8, [0x5, 0x7187483a, 0x8, 0x0, 0x57, 0x1, 0xffffffff, 0x3f]}, &(0x7f00000000c0)=0x18)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r3, 0x1f, 0x4, "854a68aa"}, 0xc)

01:32:30 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x13c8)

01:32:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  723.892446] binder: 4181:4197 Acquire 1 refcount change on invalid ref 0 ret -22
[  723.900440] binder: 4181:4197 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6d98)

01:32:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:30 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1368)

01:32:31 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101440, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x8000)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563044000000000953ec9f9770e6325"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:31 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3f60)

01:32:31 executing program 5:
link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x1000, &(0x7f0000000100)='bdev@}\x00')
accept4$vsock_stream(r0, &(0x7f0000000000), 0x10, 0x80000)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0xffffffffffffff80, 0x4)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:31 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4650)

01:32:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x19f8)

[  724.625448] binder: 4181:4232 Acquire 1 refcount change on invalid ref 0 ret -22
[  724.633183] binder: 4181:4232 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:31 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="220025bd7000fddbdf259628048d0c00030003000200000000001ccbec967651708d52d6187210c9669d304de8b8163a03719ebfa369462021d48366fcdbd2f25cf91dc96165498f04af4b7a0ea564f2653e3d7a07f0cf6342326bf3d8a1d117c023410da595224b52e63b445be5bc312ba15789658359ab99ae85eb9424c178e7cfb217b0421c25292c76c6abf69699c6e60d5434a30cdf1c2c"], 0x20}, 0x1, 0x0, 0x0, 0x7ffd}, 0x40000)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "e34fdbb0b0b3de65e5ac88befcffe873464557fe3b01b764d095de083aa5"}, 0x29)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x180, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0x6}}, 0x20)
ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000300)={0x0, @speck128})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  724.705588] binder: 4242:4246 Acquire 1 refcount change on invalid ref 0 ret -22
[  724.713209] binder: 4242:4246 unknown command -104251755
[  724.718786] binder: 4242:4246 ioctl c0306201 20000000 returned -22
01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  724.779321] binder: 4242:4261 Acquire 1 refcount change on invalid ref 0 ret -22
[  724.786954] binder: 4242:4261 unknown command -104251755
[  724.792435] binder: 4242:4261 ioctl c0306201 20000000 returned -22
[  724.802396] QAT: Invalid ioctl
01:32:31 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x43e0)

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:31 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = getpgid(0xffffffffffffffff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
rt_tgsigqueueinfo(r1, r2, 0x29, &(0x7f00000000c0)={0x33, 0x6, 0x5, 0x5e})

[  724.826818] QAT: Invalid ioctl
01:32:31 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4c2000, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x802)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x7)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440000000000e630c40e10000009a16d9da384a239fbef252882aa69718620b2c067ea83ca1167e9a47d0c0fd99b12735ee1a34e5f6808ef83f241eb8"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0))
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={<r3=>0x0, @in6={{0xa, 0x4e20, 0xbb, @mcast2, 0x1}}, 0x20, 0x1ff, 0x2, 0x60000, 0x4}, &(0x7f0000000180)=0x98)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x0, 0x3}, 0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:31 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3a8)

01:32:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7fc8)

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  724.959577] binder: 4274:4277 Acquire 1 refcount change on invalid ref 0 ret -22
[  724.967596] binder: 4274:4277 BC_REQUEST_DEATH_NOTIFICATION invalid ref 225
[  724.974778] binder: 4274:4277 ioctl c0306201 20000000 returned -11
01:32:31 executing program 5:
r0 = socket(0x1f, 0x800, 0xfffffffffffffffc)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1000000000000234)
r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80902)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xd15685c61ed9b1a0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r5, 0x8}}, 0x10)
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)

01:32:31 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bcsf0\x00', @broadcast})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, <r2=>0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
write$vnet(r1, &(0x7f0000000080)={0x1, {&(0x7f00000002c0)=""/227, 0xe3, &(0x7f00000003c0)=""/187, 0x2, 0x2}}, 0x68)
r3 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
sendmmsg$nfc_llcp(r1, &(0x7f0000006bc0)=[{&(0x7f0000000540)={0x27, 0x1, 0x0, 0x4, 0x1, 0x800, "8442416cfed41c11f409b739b89c7a756e4fe3b4e38b40ff4df66fc09585945a85a27476b01ba1dc23bd6a724b82004010e654a37a250db4f6cc2538187dad", 0x25}, 0x60, &(0x7f0000000a00)=[{&(0x7f00000005c0)="9987f7860072b2749207b7877655b4f049e955570c5f107908c570523af7c77feb005c3356f21dfc376da4efdee4ec81b48c98a7c9e58caa606e9abd1fb46bbc6258f5fa44fc983441a6193d12100f4e17be649559620265d36022ace5ea782001c522febb413f9f143ba9a4293df70c2ed54fa2b3ad28d9f08dcdd3b35241bd76f96a77f9a97cfb7f22f30a6d228cb43dd7fa0df990017501734557073087b67471ec77d03c698ba84b876f7a17536a25a448f8ab3651c966fd0b9c88581bee7eb6790caad0e6611542980c236624b5711d6748d5d128643dbf6ced06392143", 0xe0}, {&(0x7f00000006c0)="5dcf16c64fe25f0ecccbc89e123de21ea00b5ee30990ba65b2b5dc643bd6433c2d7a84af2d8b2f92e10e54543f3e0f5c5c7bc2a345ea85e4a388ff792fcefa4e48e0be9a63a85e882abd7399ed350d558a8cc7439aff651f5047b2662c46be06f57d64193de40261c4d56de49141898e426e22395f774e563f3f63e2a25506a468eb9e6233985ca1a1583783bd19e1e7cc11092510b5d0b48922251053638b9cd2fb108b5f802313c691a92226813f55f2107935bcf31984c01ec4212c7eac268246e15a2bb6886982e1b3f2aa1226794c8e1ee33a5aa54c108737a66b7fdbcc306b5a24fda698e1c83abcc4c53d2b45029bd76d", 0xf4}, {&(0x7f00000007c0)="a362fdc2ca217734f2598b58801480ef2f8412b0808bb18f538fafdc24c90591dc8d6e0db8534001a85e7147cca1f00e8a9602b77ae028c130a223fec6f0998904aef2025e0b78f7acd7d1e91286f9cd1024a2d6f6e8f0637fe2a365610fda58792a07e130045f818f56ca9dae973e798b2d053e7e8b645f3bb3b604394a95a0ba497cff4d7e18380f8fb52096cb672ed5cd94f3542b8caa5eb1c7fc186af809afdb9820b6", 0xa5}, {&(0x7f0000000880)="143dbf2f055d7e59bf936d0ea6c4e0fc3366b888bbeccd1ae1337bfd65847e763a99eea8ad77620d5696d12e1338ebe2417fe449472e8bd9344e6d5ad4f3703424358ecdbdf776034a764d7f43d540ce7d7fdd9433148a736b941b7b7a3abea7a23eac17d3ed5448b01084897707f97241ebe98ccd82", 0x76}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000900)="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", 0xfb}], 0x6, 0x0, 0x0, 0x8000}, {&(0x7f0000000a80)={0x27, 0x1, 0x0, 0x6, 0x8000, 0x5, "0530805c2d8e3a16cb017c00ab73347168144e23bf5187d53620c4265953360968339ab3840315ce06e0d11d9b8034f8bcc85f11bc2a9d93daffe5106ce003", 0x2f}, 0x60, &(0x7f0000000e00)=[{&(0x7f0000000b00)="eaf8bec662a0c6c7858da69134fece90013c3cdf1df0ff7beae8ac0de56d451d8250b0eb2b6b6038fb2453d58ae8a00aee5505bd211347247839aeaaeb1f43ecb799c9e546691b9038c12e926041c014", 0x50}, {&(0x7f0000000b80)="ae37168d0ae85752227a576118a1ca5b87d19dc9285108ab", 0x18}, {&(0x7f0000000bc0)="74746c6b6af11a606f51b1618489e08727b21db923b78f738ff7fa8dac14b8e6d623106d6539d921106919c8c1e7ec3ce168f7e9abd52d858254c8679a1f72d3ad5ca529c7e5", 0x46}, {&(0x7f0000000c40)="3b40b158562e2bff7b52132b272d1e218c20df29d4977f3a32a159431f2bfdaa64bca1d942de2a38a31b6770ed583af0c76a32671601b86d5f94f1c0727b54b80fe7362191cd2729379b603457c257a6550860732fca9d097ff9d97dfa4734fb072d63191ba811e3befee7343aa386e5483d297a023142ab28de584124f6f94d5a47d8df5bf31b3643ca1e8e15ed7c6d622fd0f7467a3d7fa18b9a06e7237d441651e84840f2a5e39486f4de2e478a8648d3054b91163f898548cc647de5a31d056b7e8dbe4d2ed6ceb63f049dcb182df4", 0xd1}, {&(0x7f0000000d40)="afd7375491259a7c38a5d656b60b88139746cf29da3bfa77256f2e40b9a28b290e129d8cba1e749372234fc5659c8e6dcc0ff086f343f03c0c7963f8b849fca5204883e781d24b28e9f76f89d315d2117950340d99303aea5a6fbbd77256ad9b7f9e33e9b093b65f94b82b244bcf417e95b960e87a1f79425d71410dc6652bd92e696bee70d35636bdd1c78826b235efad46959f8680a54cb16bb0484a2aedb4a1f1df31a7e5573b6b430cb980fbc12c90d138227c467ad8761cb3c1ac6c0302", 0xc0}], 0x5, &(0x7f0000000e80)={0x90, 0x108, 0xca, "3e51605103d68e699949616887e944c9a3f87a7c3fc036e4d0c3d4fc1f460670317f1230fe5b5d0bd5f9b78fe845dc192abe5418a6ed39c524bbfc26b1133da52df040accf1b240c2aee7fc3a2c1678e773a1b73d907e311b053a9af3cfc392811f5aea46574b62e857afb650fec77166d47c57b128465f35f"}, 0x90, 0x8000}, {&(0x7f0000001f80)={0x27, 0x0, 0x0, 0x7, 0xfffffffffffff5c8, 0x5, "bb809ce0993e8c8c193a80edb26960f16966bc8ea3e75e864d427c4e78be81085a69e74084fe7d64dcf254a806dc09862d80c740dfc3c478ae161405eb042f", 0x1a}, 0x60, &(0x7f0000003480)=[{&(0x7f0000002000)="d324b263d82d483f98b66d07ec54cbd4c3a8e38e95d0a31805b67c888fc1eae92a17dab1812aef0d5587421743a99c83f1722dbd", 0x34}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="cb31135d72f5613065fc8e6b71616372e554a8ccfd2001a74790d89f0d16036fe84bb0bda961bb926ec9b82316d5a615ccdf08cac80ea7aaa9f99191eb07c969aa9eed7c65a6b2f93b7b41856038a9d302033a4d469af7337ecf7194c63b66e902356a3680ecfe5d802722f832a87bea6596b46dad1e416710981fa650f92d4c7f715efc656a871a6e7fa5db854b5f550fe1d0348403a9f65a3312f8a1a530ff2a91a215b86f367b686baf4af4206ae1c068", 0xb2}, {&(0x7f0000003100)="7b102784807b7ba36802bad3e34dac8398ebb485f4023ca1d60ca29490f2b822b2a1ad72b16d477d72eb6f1e9daf510e93de8eb3d421f7953e9cbb5c7a9e793752cfe4830f52d39137b26394b7", 0x4d}, {&(0x7f0000003180)="34729d71a2cdac235e254ff225dc9bb9d352b1ab6e537de3f515e67b07d1bf74a5e79f6f977b6023ce3a9fc96f460476de257b8faab352185503960c1b884219bc0f101e1537385a788c1cc2587ab83dbb997b9cf5caf5f821c49bff2004c6976f97de9e62b0a6b21071b23fc634b753190fe7074e2f8ec00d6550b329c9d9bfe72a4b0e1011a9eb747266a1c16970b50f52de975d2d11a7b4d547ddc2c143b09742f74dc89f00e43137ca53e3102b44512e7c3e326cfe788ec3e29881dfbeffbe55af749d1c41c414", 0xc9}, {&(0x7f0000003280)="49f8e81a7d526ef2276e1dee3672b3b53429dd52548e0631ff54f3fb2094171118a7efd645fddc23b40084c8f7d3a9623106e6ba3d8a3933343de28a98d277afb8c75454f8ac8ff96b27021ac1a3371fb2ba2783642d56304118e6a3b3f00c623d2cf2024da873abe69d93dafd4cc21a0c4ce136c59c413e2b4d281b74ab590c0c6e684ee7bee225c95df5594a2b584dd6b5edad9fec", 0x96}, {&(0x7f0000003340)="603b565b94aaf0a7ec01e79817df6f7601bebcb57f5afef084de180eab7db0bf71466467233130bcf392e8", 0x2b}, {&(0x7f0000003380)="45a0a1fcb1b5dd1c058f3dce1767098e5ad8e38e495188d74a170f07dda8cbc0c6bf5d653b4a1b3affbd19911843aeafa3602b9ea7f47829784cef8ddc4026654893436c3af2605b2cf4455e53a298c0ee9802f3694e8b82958568aee1fc4be93a43f8f5982c20bfa9b32e5f5f0dc06647d2fff4a533d8931125765361ca650ebaafafe04a8c53a65bfc654aed40ac3283fca7c8d9276337c8116adcd92412a0089d8895588e220ea9118f3a85e1dc5c48ccde32d277b9a93cb885833406a9205191fedf60cdd73f10b383379dc0843085f37680", 0xd4}], 0x8, &(0x7f0000003500)={0xc0, 0x1b9, 0x6, "43306c410fb1c26761a7cf388777ebd7258cf75449c944f4fabd3e8a3b286412899b67fd2f4cb8fe0d4ef877b0ea7cd8fb753ed1a0747f477a8ab0e2a68324cedbb00dec87f74fdea6777587692277660f76acfd5a0133756daa272ab6fdd3efecab0c452b524226af74078c3475593c2fe0ad59021c9664fb6ea6802f1e1ca9aaa73e95694556c9184523f399b2d943dc27d0f673a2b9df73b18d8afe99b4d0788269157014f1e375"}, 0xc0, 0x1}, {&(0x7f00000035c0)={0x27, 0x1, 0x2, 0x7, 0x2, 0x5, "bd00114951a729a5201bda439f3fc1bf3fdd548e738977334587f7d707d83049507d9bacf69142f7b6b9cf3751f5d3ed5680d886b24df72078a34dddb46aae", 0x15}, 0x60, &(0x7f0000006900)=[{&(0x7f0000003640)="5515252ac05980c966758d2efe47c10a3cba214df40dda9d7a47723246a0961f77296df51977b05ad2e460243645b7dd2fe450c53f8f55f6e0243522c5f507fb4a85128e7b56a5db766e195353ce3e75e846d40f1607dbd1d41756eee4bec95e9159647b627734da0801abf3fb2f15e080545ea7c011e4ba590f3f7f27420af531bb4bf8b6603c2e5fc552786cfb928ebd047ec0b6391cc26cef432c66568274de35b2382260019e375ce482e48bce719fd49fd1ba7d516587975229b0d7ac4fe755b0607440e905d2103df6da023832405097010a26cef98c046fbe16cbd9a1835c22f518dc7cd37a4375cfb8a62f7fcb3a142a1ae58d5f1e611c0adb1a2f22b5dc18394b8bab8baf4c47512adb83f727da995a306a79d15a6554eefcd587d2bec0f2be0d783d5f90f1c8c6b1e0bd1449e8982df56a0e1e267b2791917754699f9645f8947817cde1b849c21a193fd0403f80cfcc0691ce3f89f8b5bb51fe8b2ee65323078eb8c54ead12cb2cb65e3eddd8d4ef2c451eb8ffd6dd5c01e8b70d305efbd61d477a0631bf1fb52c259c0b29a729f51fe01639014eb1fe84b127e4d0e3b3f3c7426d921ca91e24d9bf589e0b433020dfa28f1fbae1078cc07af413c868ece4f5ad16033fcb7479f9a74b4e09c7c861edfe3f82b9a388c060ef724d2424c5a9b885ff7acf7e7964e55eb5c8f469dcea35c77bd6c593d9751c94bf9b70bbf7469345292dbbafe5d3f7824e5673b64398bc098bbcd400f371f64bf75d3ac61a5a197047ce60ceeecc21425d7faac69823085df6d90c86820abe68998c4c9ade6c1b4cebe7a5d8c81fb2091ba1465401f447d75b85e2616a6b9bd48794e5666a41284dd0f843ccb8f6fd7c5b3b464f334730e22b330dc0df596bc3d6d6684aceed66dca0f09c5ffa14a1b8c5e6f180243b66723e5b2b67e1e4ab3320e7913b35a44bc5bc8ca71ba205cdc2270f2aa4f2c9faa21442a9729703e2a21de9f76fbe9398147d972166d402bcd65b75682710adf5d9676f137f4b9bbc049d7c0a54bf7ec1292c9f480c1bf5bbf27e2f51a2e47ce3d5486c6a13aadfba67d394fda6a1fe4b3665b332aa15be00eb055e700f8cb1c3e5abb1c50ed896aaa4d136ab2316b7d9a60f5ecd12f7ce732f7d38add1c82581e769d4d3d08c0598fae3e0dcccbbb0ff8431701d82563ab0eee765c660c5f851a8ab0949c2e3a439e12cd07e5e8d4d7ff3630bd22ab294471ecbae6f7ec09baba21e2a5d98bab4cc844f1afb380d41bf6e41bc24d686903928d71fbe0078c35775fbc66cc4f08b8cf522657d3679b8b37d3f20137429fcfdea036127120b02abdd93fb16a0d15e56cb4d55f67ec7fa58b26862efbc3dc4ba41e0fbc2cc5febd8b6cc7c6efec2d5eb73e48bd364fd2df570e0992f333577c05910c624334adf5fd8622eeef90ba0a6e2d74e130596abbe506864158937839f1305ded72dc681a1db5620943936d638f4fecdc65cf4815fd9e9eb7d3987d23df6f2dbfe738503b51829c90255d257bee67ca15c737b81aa816139524c3572634dc3d849b8b7f1787b5bf704f7f772cf6f895720bea7593e7bd667b82e95da2687379f86c1f74a560bb0380cc59ca9df3e7c05758ad9d90bf3717ff94c64dcf72903f9e0945b169fb6484e42a6e044f9d3b423ba9c6c9310435ca09e34e3a395a79768b97e2bc1900f0222817ee0c5d0857fe9c79153334f7bd5d7c8ce96cedbb20793a529c5f8dc83e57623ce16a9879017484690b9c5c878a769dc6912638eb15ad50cf8a0649f34cc0b001017e0abe141a10259d896a51b650a4990fed862cef201f306ce904ed39312d7ac8c1926bcfcfd4e96c15f951f737786693cf3ad936a67f4d60aea5ac749fd6ac8d444d6da72fd30bdf2472de2b871d51e4b8e493c16ce4441ef5e56f3edcb4cfd2befd937e2c07febb70327dd2e8da11ab5f75dd4cdf967ac706a3fe92d9b7591c5407ff8bde2c39c79d0f1666a7d4b03940fd95d762ad63eaf5ac075c7444f8651fdd6da0adfc59b455b9bd02765d099e19132e0387b847f95be3cbc4ca56282d81d84c17816c747cbabb4f41ad44c341228e49b34ee67872dffd66ea6336f838262522acc03ccb36b85661e400a4caa5f4fd15fb0d649be54113ac33f132dcdf59f59b016d70c85b053e1df55e080290d15cbae4268b40d5c847338177baa1bef55a4b024e880bb002743b73682ce1571465b07b8bfc9ad829915629ce176493f2867911e3dccf204005b3a6178309f40959de6a197317a9d52208f10a66ae0bef170218a29d3daedaeafbe5802558480cb03df15b9ee466d59de7dfec3c7d8f0edec5ca294565c2ed04328d4abd4fd63023772d3bb5649a02fe91a2f6cd31d5b52f655fed39e52bf5adc22ae1a9184f8b54a99b354987d8cbdd6f6c72b5cc70cb001bc38593a2bd9d33a122405d4f85dffa4bb61fed8be9222b6652d279ae8def26660a1aa79416038f248ee9f7fd45f7a8c5623ac9728c90a3baf6c83b02dee582386836a73b65265549764de4811708a46f119d05637464163e402d75e61efdd9b4a9809fa0841ac00480fe04941e9cb07ab44c91245b3dcab292e5951e4bef9d6724ffe4f83734a12bdcb784a89adced9c1672a366c56a434274661894880eb76de88a4f00a10426e859a5a3769b921bf63237d2fa26b3b8242d030afe19ea68700dd6450afa5027851f5852c04cb9e8156c4966b614689978d263f74a8423adda96f04794991cd11a18b058b1eaba58e0c2343148eb0154ec9eefb17bd74d1ec2d5a323f4f80b49b0483694511be6984ceb6a006aa9618bd68ad9a969939dcf7629e249b518e838821e3782b2ef8b74fdd8a78e8289b21adba8d3d25d1d136549635e948dd8364db63143c1c91be21395b0108ea08748e21a13cc760212ef44cbe08e11722e3fa367eb94e0b7189d379cf3900912707181ba77c7f63cca43cf5d4af107c7dca1afaeb337a03b0349058864999bda495ad0e51d1f9453f28077fef9873afe6c038848a08c68b965e4b9ab9463db14d8e847b8601457526bf5dd2e44ba3382fc9aef3b8c49f452027f9ad40bfa611d249bb6414336bce6c2c322fa09490896f61a2c3f80557deb43ddf207f41a07e179cb15d2247f6e64a101cc61836f61d013d5fd4a6cb437f988877b102e64979aca95f3299c74b4136ffabc627630dfc347ada4191138198fa9c704ecb1ef56d3c80779db88eb7968680ee0c4eb029caa78377445cd51ec21e871cd008eacd67d49a5a5aa38e70042842bfde72b53b34c3dbafa146a611c0bd20d3b0adbde09fa944996063a55437e963f0331a79b241f260fa600947fc53c346309219804639468806c9666ee4a7f2095716dcf1bc4f1009e945722f190ab6ca6ef998bfefabf628231d866166277a73f99532c34145f3f98fcd8b664b865ff1c60916ad5ee8ec0c74d821121584041afe6cfd3f0f2a851c5b78308d7df47c3a05f396cacafcdf1396ca0a5a8f9f5ea0b4bda92331ab8f590a36f87d7e609f6bd07fe9966598883dbfa1a5d67a251d3e10778e6736f81eaf22b1271ef4500cd481018bbdce6e43bd126767d1882ada347a1abdd0983ffe09921829bd19d6422b0ffb3091c4b77bbdd1413358ecdb37f074492b3a2a1de789355fde0cd482c392c78e9412bbe6cadc98174ee03daaf99918354fd158322e2dcdbb43dcd0832fa1b2cdbe9362dbdc140eb4ed476dcd25fa9bc6c703c924bdaa6369dea38a76661443b318e4dcc4c49f2b8b81398f3a39ab162d017ad7118ef05fa1d7d46cd8b14eedc9cf3354694c0b1536490aca182a9be79bb8272adcb307065f0c9c16c6b9947285b596fcb3bf332aac4929d3bd1c83b9f58c0a7ab1bd189820d2d0e625fea93b6d04e6d57f3913d490383df3a41ffc3eb4cb8ccf956237307866451c9b4d17ec503735790942d91337e493ed617c3f0421961c473ed0e5810b6dbeaf3c68b955f95b5e4eafdbb067b56020a363e65ff2273127afc6f4da91780c77d88563aea1773074b3d7c747bbce272a4d0a826e59eef1a10fef60a41d2a2bd07837476ae7e454453f95b3a6cb8549fa7256041eae017ee85e095e54586b8a0b098b5541caa3b1956a9ebe170507f84fa7b3b825f2b56854189fa07440713192f94c5b0c5cc3eae21a81562851c3472c0c563ba1820843827446c9476c1e7d455e8d5e5a2d011bff607064b9d16dcef04309cf10ab4f7771e60dbda9789ddb623389878b7d52b57cb570dae0361e8139f86199f83f6e31462cc879c8e05ff783c45296e60554622a75bca2d610528a7cc921b54c83e98f465ffe259d5243c46288699b82329aec6019275266af8b65fc5e0edd1d77fe1d8d09de08e6e75f32de8043cfb7dfdcbe97c03803b37c374e879cf6c3732630de676dd286e9f8e3ed1b7a5adf0370e4acc01052ad730b84fbb3fb526bc285a5b4ec853e9e45bff44362d0b5821319de92429fd9c630968cc377e7407bc98af5dedbb35227f376e313ccd26b457fb486c8243be27c398b8e526e3df3e67342ac95431548ae24e3949f17af3cf8ee6e409ba55d515ad7fc5966ea138387fa21f504e5231d1ac823af115966aa1d13c4c4335336abace834f9d66b9d6c359db87ecc8d8d446139820df2ee11aaaf87c10fa185af79d48eff2a6ac19beeed7e81be7b8c0628c3a8361ceea14282b528d138808cfa1f3150499b6d971fa4ed5578bfa56612d63fea86815c4c225cb8188a7be5f20c43f1dd771f9c2583a0400d6caa698e2d226f342be27c6b23ea0db0c35e655770afab9a20dc76da7cf799e3250600f3fee0372f7e7942abf0630cc0bbe104039b61ef05fa1f15e7c5b714753b4a06410994b358a8a2039cfc4aef1d40bb6992b27a99e3c29d0d61d654d99e6da628d8149c869963b75fcaa6855ecd5896f1d5d8c8ef79a92c8f126eb45aa6efec28f9afbca5b34286656f7668c4529ed28a6e83e1351fcf1bfeb90c1ed00fc82d194cf3d61fec5a668cd0b7f8799161a361e60ee46cb3fdc939ff454c4b318f059115cc78c040ad7c6fc84ffa491b7f9dbddcfc6ae29516040d32aa1293617748a96799b8c8a9ed25fea121a6306aa82e3b5ad7ecb6750808ba55adbc54f887bbc211ba860cd23c6fa2617819864662ced4de4acff87f86b65e468cd936919952a5c555954cfddee43efe431879cc7e1167191a5146e6bbe476a0b9cd8083bfd96e0ee1a448d6652dfe962a956ef351f9e2c6790c472f8ff72aa092bfbe164d1e22d764386392c6afb988bcb55849831966382ac20f921d5f6a5a1d1147e3730c837714770eaf6eed8e60c8f1c77485812fc8d276ec3b3f06fd4db0f1324f487cad3dc1aad5ac03e3e7d024519e84969151542f6f0fab7bacd5cac49d6cbb3df7e6772fbd084f479ce0e93b3d3aba722baaee662750bc9a1367834cd7f46b108382e0fa17330544275d74dcc7255825ab9cdf1245a0fda3c4909c0e5644e9e974bbc99e39263883fbf6ccff5d4416072841718a8f140bfca7313e4f65980704dd5adb060e782f9c7557a1c9420108c91adfa0e486e696994b7c5ea3306df28c23787aef5a3bcd68183098fd71e60bffa4cb7b52d381bff6015381366aa2db9eba870fe9e94173120c624e8aa06f8275b375928610d2836e3d89367f55997d50830d651862f18d0b600a5bbe29d103c478101fd8037d09cf83d45417dc6602bf8bc3395c86ce94de43a2f998a00f730bb10e60b85b8d974a1145bd25fef00b2abf6966f0", 0x1000}, {&(0x7f0000004640)="62da777b50226bc4512fcdbf3f1f36b27cd7af4f9d96e329a79b245aaa0cda93420083ddeb112a923d9bf205c12f37032042e16993acd7ee853ff88fb63132fb643095489487e7a68c4a5bc9ad0bec2302bdfa3b184b8ed31b983e0de94bd0c2886c6f8138998117a5c1ba5745e9a38e33a9a7", 0x73}, {&(0x7f00000046c0)="a3795173817858ad30d3bc98ec9d04d49b1520c87e4f67a6d044d5236ede55516a6ec7c1b686015ea5be2f9862cb9bbdb104a97399d2dee169c82a7152ef27c13109d51a78cb28d30eb068ad3ccd4ef822178fb89d27b65f49ac728101c4293fad90dc3386f1c320dae236ce1afee986cfb8fca1523d45a4b65e8b09e435b956b75c912d8973981bed5447039901737e47732590f79428ff4825d2cd35958d9806dfd1d5a6e1364ecea59f0a377740650a68abd663f7d097481a993f4d34cf1e60720febd9b3b097db3ae7081305bb31316e80d79327fec6dcada83afa59e60142259d73c18a87b65b34c0e2a63679530501fec687a4353a076bd5efefbb592c05919a27a1b46e79eee7b6911e83cad9b5c925ed5393bef9abd3984d34faf449bd848adc911d898ddf533fccef6d3c9967719609324115166aa26560d6b23133c5b5e2044ea0e05611063d82121b3129c9fb24b4bb5d520e6aa7fce50bdffebcebae3b07328d82f22db1c5a31afe360f4bac35a8afd8c445e0d0e4894f50698c616e7384b03b278718c86aee576ed529d82c1007c00f836b9f5c92d13918570dfc98f632f610f6198d5486dd28f3bf5e9bcb57e1f47fe5b3579e29735f4e54a767caf46f0fc07e9e2b275e3c39e5d4de916b241e4b910e3e2f264c2cc53803ab3d5b2dea3d83de06393f8820b64b7c52c594546b3201aabd69d70b703244cc5c7dac9c232032b10fcd4a6b59ccdbcc83bf432c8c2d63e3a57c0f2a97fbb130a1c83a091e7c09c5f0f410042d95c981dbef4acfe6a63f2875b1e1113a0808b9cb6d820ad4171c8ce5d9f20fd5e10f4cb24a6a779c5b938983e545afe584c578d5a31a6ea52c130a82e22640e88210b499d20c77ba579934523602d43382704fa07e126eec2eb1376a040f694755eb0e1a910be10c578e1d904f4239bddd7f2f0732ae4788d3e8e3911c0709ce9f88117a248b50945aac703fc6ffd587a151326cef78feded2b7a0bf958e6c437248d52460646b46ac556434fdb7314271f23c8c3b2399ad91e4acfb937629e52e39b64b1e62ec247e6582262c0c0cbdb643e382329769fa4c6850796308e142e873a9d7c52983001af0c9f92a6689b98d9bf92df5cf2e0540ddfabfdf63173d9db6e2611048129c467acfa29d9d4afe867ccac4008dbe91712df683aa72c4b770815bbecc6b4891794c579450afe1fe903a3c5243e5921851c90d786b9cd6cd684f9f2d9fc807c239eb0cb6567a7474e3775a721e5de808d7e02713a576cfc4a0be0ab711141ca12e44c7a10c69703ffa861fd3d0730f2fac37e52e968dc44cd80fa8f902566202e525f74d3818ed15ae9d44fc2960938221dc9e9df18ba2f085d8617d192520adb797fd81907918bc94dcd53792d3e91b81d3dd7cfd68a689b1461b15b84b2b59bd144f4c57254863fd8646b2e31595e235757f107bb2e935b075a27e4d8a785d7a321ba8178c7c41913c1a11a1b99893c0988ff52188a2c29f61798a991aed7a964f1c29e62b90dd76a1621fbd3d324f1f248109e125bd004902cf8f5955f8f0931beb5f5bb5e2f6fc3dded96b698f69c42a5c24debc08aeda5dbdfb957072bf7c356e89879534d17f99f16768a8e684cbfedb01c65aa7093d655349bced438e480056d8f5b6b0d7cc5a8977391ce933bebb29a1941c3f514f4739693e47106ac236bbcb734672491251e54b1371fc8f16f0a7d9747901702662371709a01aea1c552ed5a0c5be2560d478df9088124f5eef010190f9c16da7a2f7664273e040aa9e642dbf37258308e14e4ec300d4fe42a0a56c5461f3e7ec0f006b3e34a9f08fa5b5450f513a8b86e3e292f74b684b151af2b13684cfef8967607a760c0045e925cd8cad52cb14b5dcedb5ae32c77e5f434bafa01011bf162dec8082aa61b1b5a24bae15eee374442d850126c2504559e3944e683cf8ca69a514a302ee69aa598e24878b6876954ad38bb3cac475b39d77f54eed9ed3d18861fb01b07a442cff9ba0789f11592e86072a54d77a7eb4bc3e84014ab96e2158271856e382ae6280154f7a50761ad08b8b997c4fd0606133d0ae27674a14db98b17e84141a33357a22a7fd53e8ede5e780d45574f2a8f2cb4369d44b6f895fe36a8b8af4ad29409326910e6b0039bbf4c675c8d951a28c7890cdfaba8383fe93b1da50a52602ba2339eede854177a185310c2acbd1b7cbcd2e43a6d1b241bf63e861fcb818f920e2139b822b4f4063cc5e9ef24e5f288118c6a2caf453db7c5ad0f1a600d98c8492af8fa3d4e8730f465de0d095188d972634b2c660fe2394e9e6abd28b9f20ca77758bacdbe47d8a0784b7b55d9b822a42e98345102e2b15f7c45e24cdb83f0c02b9a0db7a7e7b4a72ea81b83ee2ca645180a4829e5d11a231559783a9cf6b11cfa79ddfb62db06b5e360184bf72eb728ddc3a2e375924f42d49862eedc290dd97a25935bc9b1b93748919e72dfb9efe3455246d57fbf22b4a3aca9142b780f1f2221b5e8bfc4656b96de2c5a7dde0e7fbbdc7252aaa5288022d30b30feabb65c3345b40412ccd954f78fdedc1a1b518aacb12635787b19d04bc4815cae6bcd321fc03e36c8fd7a294dcc7f284ca67580fe3142c7becbde806c3c5e0662ea0d3207df361011ad7e35da91fb5a6d5d8ce25381be304c7d0601e46c91f053f081c3ddb7ac2179a8aaa77cb79a31ef3ea35e46926c230aad407f167ff2dc25de06b4f10753197db42e0f1e5790d5794369e4f4d6841eb8b3d92785f6b0363a0947f079c2eb97081d156cfb656be46f915c4f564f6051caff71a1172da0373281c4500b164c597adef6ec8b8fc51f362752d548cf047d4906da4f56f8bc96172289d9ad4cec47eb0297932758ea10cc16c3d2f77236617f91d9e7ed2c3c548554061fd4b37189b447bde139baa8084704cef35715bc38a56076546cefd1108f4d72f3b51c8664c456c981ed912bd0773d888178ad04f52f6efbb0d2067bc9fad0bfa7ea0f1802db4a8b1af7b8b9f3108bb1964ed77ade484186a9538f9c4dba98ffb081416a0247c6955912a7095f0bc0ad64b80824b74595aed92d9c831bb1814cd4880ec5211710ea0668f5a4d8debdff832f2da6a8473579db1e38c7ae6e319c94ddff03d295f9b83f05830001bf037bab3b9638fb89315ba3d7b89e15d66c38d3a8011d1ea9a39fe9ec828379ff5535f2e84f674f4c2c3e63226ddca0a326f77e7f5676bc550dbe08f7628c9ab2bd6791e3e576d2190535acecaf8387178d33ce4cc56da93c8647cd57f56823833c8cd3e377a6f71c039a8279aca9742144ee3918fa7185fa6e97cef60b52a0da7f30b8560bf20623e70b7d3e86b54748864caaa33e85b4b984ca828efe50e99809506b746c61c2b7f3caadfe02f9b89ed6e7e4dbf2eb9dab11a68e29225bb6690c23ac71a776e27d51a6e11da403b7bac902cd24e63eeda4cfbeeca5acb4cfc227023b15dac673ece5a14642b70c07b2ebf00762553dc855b57b546d198334fbfb23f0169c2f505fabfb9cab9773540240d74962e7c7b2a423e8d86b61ea7d5489ca8f76042427cbea22a669ef6eb957f61a36fa4b58e4f36a3b5ccab33345f40d0bec5503652f703e2533ffa798c6940aadd164df8c7eef2e6231125883e31873dc8a0dbd272898be276eeaf83c9ab5479c97ea2fc111c602e026124ecbdfab742a26f82d67ba8cc4bdfec7a29179c35458ee054243dd18cb7a32c618a7716e1c59341ce9900556837ca7bebb42e63d9e19252ef5e6161a65d4f468960b30cd6dca3f0a882b90fe2176137dfa42db03ec0fe8c8f81c3b3946e3847239747ae5334a7b6a29eb5e4c907080f31166bfa071ceec4a2deda1be7800990efcaa2c9364723eeedd338609dc5ecee409673dddebaba541809e7726f4f50e43b4e68f14bfa58f41879f1d48530d0674ee8dac0ea15e528e3b354b38a5f08bac1eb84d6747893954a0e3a01a7d4559859261a18790a1e9eb68d60b29286d3ac6ffb957ca0fa5e9779ddb05b04ad249f9a07e6a4f5147748b2acbc0dc28a813e17e722bffeb4a74d7516f1d4e04761293eeef6f0692f2997d7ed9bcb84adda551544d44373ae63cc38c145ce25e6866d249afcf0e91daa6098a82dc8bae40c49d16ded612ba71fc9cc5ed0219a4f85e91121a2c75ab96e3297c1e25ff95e07c1ec0ab1d5a34a465e4bb0e402234b4121b3780cd0121edfda9ffee94e30722ff8f43fb0eb8f0ed4358abe0959579160e9c08b548f37b595e21ca7aeea7b06a87e13fbfc039f1881d5cb8631bd8cdd602a2476ca158177cda75807543dd074fa2b339be4fc300dc642d54af2230d9fc3342a8166b29574eeb9e8269495585d1b27308c75d9cab80c8760ac935a714c518c23a53bba8a15918d13f408f3999234dabe42dc2f409e0cd88bf4287bafedf01f35027ca120a2244b030466287895140d5d724e37c028f47ace2ae59eaed7edd4cfa1ad14ee51c5b1c5ffb038b549f8abf663cb842db2be86320b32b9ab30d3bccc9b1942daf425c1c6de7b30509db0a9d5cf1b5a09fc29f008136aaeaad84b81ea04a6e61a312a9a83898270bac677a3ac2b8fed96a660ad74a0545285fbee1bad23a38acc2260c393ec20b0b7a7d8ea4973972a6cdba53e65d5b79001dc3d882341ab3bc49ea411578f39c52cc42584c26c251d4a292e70450eeb1e45d8832c429e95eb191fd26920b066d9a31630b3ffcc4b9dfab963dc8d2187315b444b5bbda4695394840c2491481e02aac2308ddb8c9687b5e30aaa0604c98d236af983c29802c64426c6ef8bdfa7b3dab7a7b10ab9d9f019b3376e5a3d050dfcce2d6d33778bc741dfc6ab072fdc782581835dcf651e4e0f4de93e8e765bb5e5d9e892b2dc08c198a4fa7032ee18f4432c6feba3ef5a18f682429bd8b7b25c78b1c6ef98cbbf8589339400dea4deee5c852e60c6bf471a957efe625cc957a75740339c3da81b780a4106f956a1690f379244c0889a85cf31ecec2d22640ebaff3d91e90bec3bf1e4da0d3cff4735b0ef099d2a92d4164f850afcf0c23b925c116de5d8fdce3d383c2a03ce6e2f5c1c9175d0776cf28925f9ed545d282a0abe6b0400f03e535c83528f9b7f833b0b023804c35f56baa8096c1659d8aac206aadf0bed5504a5a118fe828b62b15a4299011e952c1ea79532d40b689c3a7d02b5539eecd133716b6f65086c2095eed35e6b17f55ef9a85155804d6627579b8a4ec4770ea7020b1fa864a1dafc33976af5471ab4a7d48f0b495fa47c86645a69c7e1344ca4ed1f917bba1bcd469f3edf2bf18cbe2362e60380ad7ead632bc3438dc54959fd0173d4356b5a2fc4620c010df04feb2a00092c482ac9c73804885a14400b4f115ba2dc5fc357aeb20b9e955e58b0e666b9264645ee0dca164f69f6e0893a8b872e39bb3180b0a5807944ab4c23891191038cbbd3de9dd7786ec381e2177f907d9b0f7c56475ab0e84948dac16543ee4964d57ec85ef7cd01553acc0ddf758ce7a002f56ca71128b068e488326f048fafc129c3ec422df2d1719c798771844bd8cbb492ae51a775894ca057a6cc8351eb9d7f0f6628c8e4f9411c202fa3b673b20263fce6d98c72f76f769d3410f404e9339992d58c6e4be001fc258d5f419d773fd756506f269408660c0e447f88e5575dc710aa2ef18a2883a54bdcf91ff9f29bedae445f7329b593073b690e49a6296220c2e4825499be3abec1e7e7d8e19e0608cac5ec2539f9261d7d9e41aff6f201b6ba", 0x1000}, {&(0x7f00000056c0)="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", 0x1000}, {&(0x7f00000066c0)="b71e6b041c7107e062322f5150c73ad0405b88ce8d04f5293756e1188932a93dca41cb4151aa573c249d2af4b17f9507ab7d0b660ba2107c8dff7c1a22f15fb29a50938af98c47b162f131918f40c6a39085beb5a4072b372615a1c2a187f73e78df039fc14a4d3ca7555717066788c5c376e6bcfdb2628ff762438b18b9d24ea1623590d5159ea039482a85", 0x8c}, {&(0x7f0000006780)="17923301e60cc18991b2da98089c08392e99d3dbd73467a2750e9e2e1ed2ff0ab78af91659f693f56fdd99a516d1efbd0f48882058f7f1b41f3b54bad291858a28f498b791b4867250e864c61fc790fe69f4348a1445501e", 0x58}, {&(0x7f0000006800)="72cf514fe3d57409743242bb97a026f98db6f03720c813da7f5d6dcf8b80f90f7bb585379217a24ab29bb5be5daa2d456e0215fb1a76d851c9d55ec4146186c6fd1a6984678a25e2e71f06e182ccc44e3c", 0x51}, {&(0x7f0000006880)="f29a67d64b0583b8484ac51a9b6cb0953b5a5be22abc53891b6e556210ce69cf8bef039a47eba0954ac0f7e96eec68874cf203a64f16078ed40ecb94f6b0fba3197629aefef6fa2b9f1ed1bc2826d012aebb8ff70c2d225b20b7d82a6ff2240c5c8b407734830bb4b895c43d3b0c88d49f85032c222a6aec7e867a4a", 0x7c}], 0x8, &(0x7f0000006980)={0x48, 0x118, 0x87a1, "815e812fe81a8de534d91a9899212b79461da1fd82ae903e84dda58e6fde409aaeed1b66ce7cadace1f38f10412d3a44da3c325c"}, 0x48, 0x40000}, {&(0x7f0000006a00)={0x27, 0x0, 0x1, 0x7, 0x1000, 0x6, "78c4b4cbf311f8d0c4d40d396b0fe97c5da8e5989b0234b8935bd952215d4d6b26d538e076957a704e7d66435115e46837904e850902ab74e868bb21f279c6", 0x3f}, 0x60, &(0x7f0000006a80), 0x0, &(0x7f0000006ac0)=ANY=[@ANYBLOB="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"], 0x100, 0x4000000}], 0x5, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="d4e20440000000000e63eddc32e4bc9d336ca94ec2c2d5f1ad8e898e2c9d3f"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000480)='syzkaller0\x00')
accept4$alg(r0, 0x0, 0x0, 0x80800)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000006d00)={<r4=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000006d40)={r4, 0x2})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000006a80)={0x1, 0x1f25, 0x29})
io_setup(0x6, &(0x7f0000000180))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0))
pkey_alloc(0x0, 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:31 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8df0)

[  725.053053] binder: 4274:4277 Acquire 1 refcount change on invalid ref 0 ret -22
[  725.060790] binder: 4274:4277 BC_REQUEST_DEATH_NOTIFICATION invalid ref 225
01:32:31 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fff, 0x40000)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x3, 0x8, [0x1, 0x7]})

01:32:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1710)

01:32:31 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1aa0)

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  725.195079] binder: 4304:4318 unknown command 1074062036
[  725.200622] binder: 4304:4318 ioctl c0306201 20000000 returned -22
01:32:31 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6af8)

[  725.239376] binder: 4304:4322 unknown command 1074062036
[  725.245249] binder: 4304:4322 ioctl c0306201 20000000 returned -22
01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:31 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0x10000)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:31 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="c5769f1facc4ca563f3f5e63"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0xe409, 0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1140)

01:32:31 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x200000, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/47, 0xffffffffffffffe5}], 0x1)

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:31 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x24d8)

01:32:31 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8280)

01:32:31 executing program 5:
r0 = socket(0x4, 0x80802, 0xeffffffffffffffd)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240), 0xf7)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x3c, [], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/60}, &(0x7f0000000180)=0x78)

[  725.485577] binder: 4347:4358 unknown command 530544325
[  725.491045] binder: 4347:4358 ioctl c0306201 20000200 returned -22
[  725.498991] binder: 4347:4358 Acquire 1 refcount change on invalid ref 0 ret -22
[  725.506889] binder: 4347:4358 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x73f8)

01:32:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:32 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[])
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000880)={<r0=>0x0, 0x0, 0x101})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000980)={0x0, r0})
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0xa0000, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x14b3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x97)
fcntl$notify(r1, 0x402, 0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00')
sendfile(r2, r2, &(0x7f00000000c0), 0x8080ffffff10)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000008c0))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00')
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
r5 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x60000008})
epoll_wait(r5, &(0x7f00000005c0), 0x0, 0x1ff)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r6, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={<r7=>0x0, 0x800}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000080)={r7, @in={{0x2, 0x4e20, @loopback}}}, 0x84)

01:32:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7a70)

01:32:32 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6420)

01:32:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:32 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x141000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0000000000000000014df142"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:32 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x83e8)

[  726.235898] binder: 4347:4368 unknown command 530544325
[  726.241352] binder: 4347:4368 ioctl c0306201 20000200 returned -22
[  726.247944] binder: 4347:4350 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  726.378583] binder: 4406:4416 unknown command 0
[  726.383394] binder: 4406:4416 ioctl c0306201 20000000 returned -22
01:32:32 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

[  726.446964] binder: 4406:4424 unknown command 0
[  726.451700] binder: 4406:4424 ioctl c0306201 20000000 returned -22
01:32:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2538)

01:32:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  726.599714] binder: 4429:4430 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:33 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240), 0x4a8)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00000000c0)={0x2, <r1=>0xffffffffffffffff, 0x1})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0xf10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x24000000)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)={0x0, 0x4, 0x3, &(0x7f0000000100)=0x8004})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @remote, 0x4e23, 0x0, 'lblc\x00', 0x1b, 0x7, 0x58}, 0x2c)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

01:32:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:33 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x330)

01:32:33 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7f8)

01:32:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:33 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240), 0x1000000000000220)

01:32:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5430)

01:32:33 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d6961a29620c63"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304400000000000630c40000000a8"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:33 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4608)

01:32:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:33 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x8000, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x2000)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x40, 0x6, 0x0, {0x3, 0x2, 0x17, 0x0, 'user{ppp0nodev}-em0proc'}}, 0x40)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:33 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4740)

01:32:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x36c0)

01:32:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:33 executing program 5:
r0 = socket(0xd, 0x0, 0x0)
fchdir(r0)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x10000, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000063a60000a1", 0xffffffffffffffe8, 0x0, 0x0, 0x3e2ed652ec4fe6af)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x7fff, 0x4)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  727.429253] binder: 4494:4495 unknown command 689608406
[  727.435166] binder: 4494:4495 ioctl c0306201 20000200 returned -22
[  727.443377] binder: 4494:4495 unknown command 1074553600
[  727.448947] binder: 4494:4495 ioctl c0306201 20000000 returned -22
01:32:33 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000040)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:33 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="a246"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

[  727.493093] binder: 4494:4495 unknown command 689608406
[  727.498662] binder: 4494:4495 ioctl c0306201 20000200 returned -22
[  727.505205] binder_thread_write: 4 callbacks suppressed
[  727.505241] binder: 4494:4495 Acquire 1 refcount change on invalid ref 0 ret -22
[  727.518230] binder: 4494:4495 unknown command 1074553600
[  727.523711] binder: 4494:4495 ioctl c0306201 20000000 returned -22
01:32:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2160)

01:32:33 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1248)

01:32:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:34 executing program 5:
r0 = socket(0x10, 0xf, 0x8)
readv(r0, &(0x7f0000000000), 0x1000000000000121)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x200, 0x406040)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)

01:32:34 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4e48)

01:32:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

[  727.675980] binder: 4519:4539 unknown command 18082
[  727.681051] binder: 4519:4539 ioctl c0306201 20000200 returned -22
[  727.693999] binder: 4519:4539 Acquire 1 refcount change on invalid ref 0 ret -22
[  727.701604] binder_thread_write: 1 callbacks suppressed
[  727.701615] binder: 4519:4539 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:34 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3ac1, 0x100)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000040)=""/164)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6d8)

01:32:34 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1518)

01:32:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:34 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:34 executing program 5:
r0 = socket(0x10, 0xf, 0x3)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00')
write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7)

01:32:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:34 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2040)

01:32:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6b28)

01:32:34 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3db0)

[  728.426477] binder: 4519:4571 unknown command 18082
[  728.431788] binder: 4519:4571 ioctl c0306201 20000200 returned -22
[  728.438433] binder: 4519:4527 Acquire 1 refcount change on invalid ref 0 ret -22
[  728.446155] binder: 4519:4527 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:34 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000180)="120000001600e7ef007b00000000d5a04c8ff90c93137b87f14b53000000a1a178a89a5c1826ed4f639a744b9bdd6e2c42030011c52b45d46ddf6b41489f702ac9", 0x41, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000280)={r0, 0x0, 0x5, "a9813cf59a35bf04d124a3736006d9899571a0e3f0e3253292ca3693c2acb9a9293150f1751aa78cfb0c6e6982431e1a39f57b2bc1eb3e649bbec87507ffece782a2ed79eb6b614063b829a33348fd396c785e74e776b98665f205b1a8f73fdcacf495705468939f1dbbb42a118167d128fc20a1c499810d0cc288aa6b89f7792fb9af7de81cfe166157fdf9c202c97be5e1943cc2d0ce8499e1ab152622d6a3d46830b609995dc3e792f302e696493d1d25f62dcd80dce00f3af1b87a3f184a60af3d08379229a7b4b150b843b1f8eaf1c0bc1610b26b2b5e7561a1c07bfafd96b07153521261967b"})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x80000, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040))

01:32:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:34 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e7ef007b00000000000000a1", 0xffffffffffffffe9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffeab)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x337e, 0x4)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  728.564106] binder: 4579:4591 Acquire 1 refcount change on invalid ref 0 ret -22
[  728.571805] binder: 4579:4591 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:35 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x87a8)

01:32:35 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1d88)

01:32:35 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05631d40000000000e630c4000000000"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:35 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000001c0)='."&selinux}\x00', 0xc, 0x2)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x2)

01:32:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4890)

01:32:35 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1980)

01:32:35 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x18)

[  729.295864] binder: 4579:4624 Acquire 1 refcount change on invalid ref 0 ret -22
[  729.303486] binder: 4579:4624 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0)

01:32:35 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000280)="120000001600e7ef007b00000000000000a152b324808464de83f8954bd328985ec8a123e1dd8cce1da0174645f6f4cb87ebfc4ce67ee7dbd64a146325f0f367d51c61984ed120d208f6683405eba5a4694a603c99d8188cf48058f339477670e247ec7f35da89c2a6b7a935f5fde3065efef33efbce5808ae8cd47077c68aa19c0bd02d03b483e218aad3ba414fdb07ed979dac65780ec27adf8a421a04", 0x9e, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in6}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8)
r3 = perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x10000, 0x2, 0xfff, 0x1, 0x0, 0x3ff, 0x2, 0x0, 0x4, 0x8, 0x4, 0x0, 0xfffffffffffff9a6, 0x7fff, 0x9, 0x8000, 0x5, 0x6, 0x6, 0x9, 0x7fffffff, 0x6aead1df, 0x1, 0x40, 0x7, 0x2, 0x9, 0x1, 0xfffffffffffffffd, 0x7f, 0x3, 0x1, 0x6, 0x40, 0x0, 0x400, 0x0, 0x8001, 0x0, @perf_config_ext={0x10000, 0x8}, 0x0, 0x5137, 0x0, 0x0, 0x2, 0x1, 0x100}, r1, 0x9, r2, 0x1)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e24, 0x7ff, @ipv4={[], [], @remote}, 0x6}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x10}, 0x8000800000000}, 0x401, [0x40, 0x3, 0x400, 0xc04, 0x7, 0x602, 0x9, 0x3]}, 0x5c)
splice(r3, &(0x7f0000000440), r3, &(0x7f0000000480), 0x16, 0xc)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x50010, r0, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2730)

01:32:35 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4098)

[  729.412623] binder: 4634:4648 unknown command 1075667717
[  729.418595] binder: 4634:4648 ioctl c0306201 20000000 returned -22
01:32:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf0ffffff00000000)

01:32:35 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101080, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8000, 0x0)
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040))
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x8, 0x1f, 0x436, 0x9})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:35 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c630000926763625659efd303b60b4d33cae93503015117d5971d41e2c8da2719f26a00d24eae8bfe572acd34d3bf70dc8a060f8528dc3e9a1704e83396d248fa05b5d1c9ea8a545c6e13a926668d72ff7f0cf296f938476cbd55f82c16edeb49bc20c2bb17dbfc7838d9c625fb98afd5c0e4eb0a3a"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:35 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x10f8)

01:32:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xffffff7f00000000)

01:32:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x200000000000000)

01:32:36 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240), 0x1)

01:32:36 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x270)

01:32:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x540)

01:32:36 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="3c68f6069015f6983618b0120000001600e72459cdf0389a8891ec421c2f04567bbb45998e21d2877a8991523af393fd774a5b60f7be642cfc", 0x39, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  729.687588] binder: 4671:4683 Acquire 1 refcount change on invalid ref 0 ret -22
[  729.695256] binder: 4671:4683 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf000000)

01:32:36 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x27c0)

01:32:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf0ffffff)

01:32:36 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @broadcast}}, 0x1e)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'veth0_to_bridge\x00', {0x2, 0x7, @multicast2}})
connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7, 0x4, 0x1f, "4fa36d93ad9f0c8e5982baf87995a2a25cade790d5a134751e4d6bf7798f14069ce542ffb888cb83ff13614b537194dcf950eab15f5eb5907a257416fba948", 0x1f}, 0x60)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4)
sendmmsg$nfc_llcp(r0, &(0x7f00000081c0)=[{&(0x7f0000000280)={0x27, 0x1, 0x1, 0x6, 0x7, 0x80000001, "ba081a46b889753e50dc940b0f5503c397b337bc8b00e6eef6329da82b5544e549a4f14d639e80cb1a460b14bbd12fddcd83e39d52f4f8fe19851a137504d2", 0x2e}, 0x60, &(0x7f00000001c0), 0x0, &(0x7f0000000300)={0x90, 0x107, 0x0, "a2239d0b7c9a462f0b1483938abc632a62a94576ddda43e6ea0487b86bb8149b5c82aab59ebc86028287ba295336c98ffa2d2b0cacd7441fba90e1d4e95bcec0c781065e54c94f9fce9972e7fbd98cf5ab1a3705fd823bc9a69bfd6ba5ce46ec90c3ffcd143b97252526e7da1009449956086ccc0c94f044336d6146e14796"}, 0x90, 0x8004}, {&(0x7f00000003c0)={0x27, 0x0, 0x1, 0x6, 0x2, 0x95d3, "3a4ebe9c48dd94c8e0fa53053a5543845bf1da127d5ab0ceaf01574aaf7feff1ad0c641ed6f1a2809740f8dffd14030554a9e6d3ba1bf4df60acc9f8b2e85b", 0x27}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000440)="c897500ba87569be2f97a5fba715db2e6643362dbc0f2d9df6056130d4192ab58a4d99ca4b8587cfc82d19dd35b1dd33d7c917cdd6e4614ee218637779c859b967ac5b83d01397bb1c76e77a899a87cd54b09b5a06ea08c5e578ed4a5604891f7be20075142846a43977a83c0df8886ada729130dbd635f480269d48dc8e321fadb5a51039599b4434450783d3ad5da5510f0b4c790fb66c74a72c9a07392df8", 0xa0}, {&(0x7f0000000500)="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", 0xfe}], 0x2, &(0x7f0000000640)={0x100, 0x108, 0x1, "62893f8b4c8a339d6c417d8715832fce738a28bc409373c15dc6270bbc99dbac55d5b0d2936a6a0ce25e270545117dd0dae9b8886b4128b0b681a10d3cdbc2a44b5fff0da53573dd769af0eb2c2bd22452f390eabc7e990122c788a091f02d0dfe085bf2ff32df1f43f32c784aeeff2ab7ced23fe0153fa53c16be00bcf69262ba6332e2642ec2c733ea1d770f0a9cdf9f5415f8f9a9d0ef464a49b040d4881345a180fba100052fb7b91eed90308b42cef20d89ef23f86fe4629315899d1cbd821cf0ced821ff8e48f5e0b3b9bb55e886172f2ce235e173b509f7740748d310847bea14c75f818c5c7b2e3f06"}, 0x100, 0x8000}, {&(0x7f0000000740)={0x27, 0x1, 0x0, 0x7, 0x6, 0x4, "eca9bb6e4dff48c5b2e6b6febebf3dc6fbf5032ed1c34f9792bba73159e2b83a87f55d88387ba4657da25b4b4d95517e388f0a97768da2c06cee16b56976c9", 0x3c}, 0x60, &(0x7f0000001b80)=[{&(0x7f00000007c0)="f341160936a1", 0x6}, {&(0x7f0000000800)="c42ac2dd533451b63fbe03868ac5e6ee165f6f2934b18173e077732d80764d9853e50372522cbbf1f2f2cebb290cea95bd33ef547d", 0x35}, {&(0x7f0000000840)="d793de555d90809439d258608b3724535e7e63aa271647a1be0e7067c510261e791abacde87350dbb43c0a0b0d4c3c89cfee0c356f12af633ca05be6145df6d912bc8530dbe8ce77d7147f7611e126ae14e4b62438329c8a0a3570b94aa402c47922c156eb8d5a89e4e1a11c755052ec265b9a99b8ffec274a9cd1c329fb17af0745938146d1977d8070718d15acd9905ef404fa3cb7e549de2ef57f1be06c928716736eb3c7c4e00d6579423bc65ae5135256a2e233eba194acb1f744e62a56d8531c", 0xc3}, {&(0x7f0000000940)="25413f5c669dca1dbfd466cc3ec576359677928b52cd9aed10fe0b156ed61af430f2d17587746f452f524dca2ffb99c19ffe4fd58611af2eee5f3d51f2db605e80c70c5823db81a955b0", 0x4a}, {&(0x7f00000009c0)="c912db2a81b7005af8f17c64315167d956a959f566e4b23ae9b2b41050d547edf9adfeb2", 0x24}, {&(0x7f0000000a00)="fb0bc703de9f433220ee9a9dd4779727bdd2f61ff9d57867d17e2984b9bdbe215e30b6e56939f4b665b2c53837cc41c4545d4a7a2f45936c2f4a450e86c96d4675b6a6126d0f6e424b6971daff7a6f407d847ce451ff351e74c0647cb20b338968e5945e7fe915dadf19c29b3972a6595c3486df8f2094852e1302cdb3d19c38e1a97dbbabf416182084bcd0b645b6a37b87fb8700f648c4fdd873f24a6d07f2421d9c88ddfc9b62c142f447f9e50e2446f9fef3cfc839920acb5e526fd4574e18e3bfbdda80d0855a3a", 0xca}, {&(0x7f0000000b00)="41bebcc39dc618a4b83cb6a9b2cc05319bb0230dbd6a889c97c61e01c5ebc710efac79deae2d4332a4ef55ed641c8f480cc653dc6f9a3427f0c749756d70fb9706db1b3d4d3882f5d09111ee49fb85", 0x4f}, {&(0x7f0000000b80)="877c3b5682e2d16957bd2e0fa918f3901682e967db38c8b857608cc80cd9f6dab22c196d7099a95f4d3918be96ea3a0678528203e39c3cfe7a78bb7b213e3c1bca2692e272bd63bcbb4e4fa832f48920b30079c7bb0c94cecbfe174c5e2643a71613a7d888a4094255dc19a15c5698b33d5457facfa7d24fb1b1d984a8f701e28866a5821236073bdb4543a90b70cbdd797f58ca75193bf1a05cfef9d991d71403a461d96b8656dfad01be9223337d39d19153a91aa2edd327273c6d7fb1e3ed6fb40783f16f7c0c59bb4efdf14671f817c0d8db295d036405e478fb823ea37afe46789b3d423dba5e2b08584c8119814dc84bb4ca8675bbf7440e2e0ff9e6db612cec7c26e1332183ed4fa87b4d40ebce62fee4ab32f89c8d20cf0a3a2bd0f3ea0e7365cc0c8a2f91ae09e6be73bea8159bdece7dc16ff04d47e717708c010501831986e182e06f1e6913584f98d563d89c1db1dc4836cb8e3a78d362f0b2ab7ee3b75f30f5014a337ec44f842b6708fc735d2208cd377672a021282726c3df28f4fb6a67df16159a1a22b3832366415f0de389d3126c26b09ca9c05c17a354465f14b6495f2e16d0ba1f99334b373171382a41698c1adc0ec0038b46f4cfb51b7a0f0e550eb905f3ace40d24c4688669f6af8f84e7b74109312f40485f4e633b355d60b826f9652647d8c0f5684dc7c1f8456c6a067ccfc5298a5ac821d968993188088f4a57fb1532d81e7e51b7a29efff30520df1ee9cb36b954da17fe63f88ccd868043f9179e530c961a29d74ad2993bb79771fcdf1df5ca992fcb391285843612f56e89b866bab7e2ae76671d424fbb9c7bb213f25e6764988ce2435ce013f29f94aeb18e88bc4921ec5580c82e674a9298f9ad59abc046d0297a051a3416e1cebbb12d85af8b5eb812612d3c31abf7de06a4dd918d559543f1c03e3168f1ef564637ce2874ff44dcb4e6375755bf26cfc3de2dfa14e8067dc077f34e441811b3e573ce70b8286160e1dfa80d0a7274dfb6285d6ab7cd308c0426a6f0ed0e79c2c68c2393864ddb3bb0133cc7e293ffd27af41899c22441b151cc7c516c22d1b0f2c1e629d183bcad8d465baafaeddba2ab7d1e7e2352a057d0613f2757a683e4749deb78a51934ab9b4b0f1524d067f7e484a7fefb174f8fd5bda4d6904b3479f9d42b5a0a254e171a494d87dad03900986a2a81fd75e9c7db9451c94a2ecbe27eaed497dfad0fdfe5ccce11bfdef89ed18c4b3fae57c7844dbd496bd7a1cc179e22283e07b5a60543e7231bb612e45f902aa27acc97a2cf4514662ec04b31d960e713fcfaa1aee5dcc72317ce85a3cc9e7d025d62ecd3a7cd6691b53a0c1e57c4c4296078d8388aa9287fefc1a23a1a811de94110d9518887a5bed00206dcdcbfcc3df884d981b4b06b6706fdd1974cd432b2d32f300d375254688326f74a4932a90ae954e1be75fd89feed8997643b3d0d9df4ead40f03a25dfc772509fb31b16483122a075fc41c38e8a91d063507cc2cdef4a9d4597c0ae9ae4b4b8131201eddeacd46d4d744f7228565ced6b79f8076a4f18495801738f4b1e7b862d9c94bef653fb3d59367199337f0c93d33ecc19c989fce9901e9f6e330c79d8d6579e1cba4e992bbeee1ad25071c04125963889b014634d14ed6d17dfaa8a0ec25d9cd1ae20935847a5045ac31a87e7be7ad8b74d972635f393ac71f23032bc024377a500b8b1aac0ec0fd4d2fbf1c849eb750711dd420bfa96105af42b405a371f5ccaea299cd6f9263eab4e1f07bf9e4e3809c5dcb4e191d7274ef9dd0f8ed27de84a35a26d3740dc21d89abbd424dc60e275fa31fd15a5f7eecf0d742059a4a49ae0b7d551c4c35f1e24a6a06ea99e8b1590ece3adf5b9464eac328d5b797c8fb93f0c06541840f0a9047b191de4a54ac143676adf2888529107373f288a087aa60669f757441430d5d939eabd494058547696e8992532d64c858ba8e974c22a889ac143db803459d3506f95498058449fd88caa000e14ac39f52fb9867398c5338b4f50c6b83e8691f1e04d579d9ecbd44f79be07e1e4b56e597767bd74a5e655c600cb91f733f1e069630e3e2235ff6c4c58fbae3e1305b7d46b90661e99c3dd979b0258ac7c5ed4928caf8c7e90201206e296f31703ed77850e3a13badd345ca9498586cfcfef93a98066b559bbac65c8700bc13a61cda28ae3ee5c961a48bd350bf1cf709e509a66cdf99e540b4cc67984d8e2f6dd5bc96a01b6c0dc776a77e97075313600f44d052ca26a64fe39d2e45c3f0954fbb615ff8cbd888299386551f1fcb8eb0fd83b20f61fd89ecdbc4b8fd5a8a4a8444e56b590bc3b4d0c5b6e9ca7b9990f2184a9cb001d895cc53efd567a1be1212805086e35144d6c925a326e8561074d82541e625b7ca6e1fd80cc9dda57aa2eb9a215dd005bd3853a337adaa374eb5128665e91d883fb90a362002f4ffda53215d3602365dce70479c40c169af2276d1c3de818463be19ba4d25d8dbbfe5f6d99d966a43d16ae5ecc3cf1b03785ef3abc08484aaf8611d235a5fbaa406fcb7a537c6185e9c322b7ad3341767121a6821661927586e5b6a6818f4fdf025e0dca06aeab8e920e53c5635807b0a311bfdc1d1bf7078909766f1aaf644db62556c30d384336d22c214ce2e6840886c9765a212d8eb0bb60d254f37bae6f93ef025ee2eea738a516697d4368ad0355277d67f752730d660f55d9d821fc5b8045af42457020dc586b96f5dc8e6df95cde342221d10983774308e2b753ad99d954899fa0136b55917406af6c9387368521abbe5f9f8b4fc7cda513dd8eaa11c33caa2e3764ebda4ac1f8bdcb3bfcc1732b8de98be923cfc8bf5d3f5919ac98c09b004c09563307c1ccaf7a50e85dacee82a68df43bcb46e184a44d1aa07c7b7e3f67d3f01a61cfa25cfac7c89b6bfc65e2570f7c43d5c49417e558b7197faa722f5fb997de460e15ed04407a6f26dad16afa7a18db41282e1e8ce3e5855efa479628b3b984a0f541acc443a37758add34ce526b2a0d1c3ad8785dce948bef41457f3d817d3b8729f1806fc9da0a0aa51536f90af7d556532437a64ca09e221ec481e5ab3b0bc84c436dbcd34500b6cd0b18bb03692755d7eb2d0953fbf62ca3866332fe847c096310fd5a22b1cb59f96824f8977db4451657a12c46ba8136cef39c9f00cb6452c0c031aa17f4c2b41cb5c3bcba2d13ffbf7c41ecdfcb88276dd544cb5ee845768e4062bef998b7821f9d7d882a027b88e8468be9d0b2d76280488a160300a18dba2c509ee80957b2fe06990903a4ebc4a43adfdae29c8baabea1b147cd2dc774b917b2c6f2cb3201a9c998c7be77fe68c39f778b912c7fce2c920c884538f8f8e4edc7d4920e735967036c0d4cbf1cf408b638ef9f99f11a91daec748931426bb86c04f33003abf3015baea1a49aa493f6845ce888bed7fb3086f2d664f5afbe7738618ddccd1ca85339c143b76aac8459e3aa5f66c98adc182277498e879d95789a00fb38bb3b7f983bec0544d76f87bf71354c91dc97c497ea8e122781f03f977dee7563d08ab78945c91b1427fb3bb3b51dcf2c36ba7ab977a9e813bd3bd88679ec9fb5c5ab1ef5501867e86f817ceabfcf8d34337255176836778960b8d5a028b181b3092540b59b04700ffbb59d09947e8e76d2aa73e5c9a87c7f52628f70c4c6bb8da269a3dd777f4905606ac300aeeba7578c95bf0a59cd595d21a87b858d971d9917064db657fbebcb01ec67102e32987e9ad62b3c5e80ab0ff2dc171ad762b4795558b778b64ae339c68e8bad36c18f64c8fd5315f757471f88fa86f1c7c8638f7b2b8511df2e9464190732a05f07a0e532bdc021b6c4fddc0179019e2528e496dc546710e774e3749ca4d76ef1f7ce90c3ab7cc518786d82805f99793fe1fe269ce73ddacde4990afdd74363ce243b1601f3a97b0b2b745720ef487e2171f1142cec8785d232ad513b1313c3b382409aacf24fa5588317eb6578e48de819f13eff8c6bbd3c61cdf43ea6cf2c4155f83b353ff333513a043b744e755d3b3e95833987c728a98563aa9252210cb1b1a58616cad6782242dd324ad6f903626de5400f0fb55c87e2f85bd8aa90c2107768cf707a8796416dfeeb6c8fa79361cd1aa2d64cd531d5678350fab68052f9b244500400175829fe1811013b48a35ffdb45b97c9a61caebf16be1ef1bd2669525a900e4958181e6873cc5c11eb1f673399ae598b25c48dc410bdf9f581b7d615c77d88f6e541fc5cfd15b6075c4372e428d13cb7add873ba1d082713551dd5286abdfe9817c4cca4488ebabb4e7cc55c010932a947e23d4ee2df04a4482b2880d8bb9e0804aafd1cc134eed18badc3aebbfbd62c8b8a915ec8ee5bec3856c234aaced6c424564c4f884ee47d3e4c1bb7b9c8c6ecc939fc6d4e2c37af012a7b0a6bcb3db3413fd2929920e66ad89af851666b3234bf2791892a4db4c7c0b8d3efa218b365271d92fe6b5814ae4bb974912a72f4b02f229ab17dfaa10a993b11f044ed4d4a329ed952e7d6b28a274518b440e7baa8dd8ed77304787cc43cf78f065440f156d300ea071c376799764bbe86ec71975cffaf130a3475b9c4221a5200b2338484c7834439d40399100f59198b8e1dd63f6f9c8ce096c4a341b492050248f1cf8fcca42fbbd9a603ae041de638b7e5e883aaf7f260096195ed5cae83654233c6f3cafda63b2ae35805436e540c17b40f0619ec1ee1905dd8c63f7da5923f7fa753f1a302fee1484ef4657837c15b47b5149ef23ae559862628e10c7156cebbbb6f68d46471c56f1c7f2e229b6c1e97b7c53914727fe4d534f92e8b1d38eb125d81d917aba8758fc59854a9d1c42ea2a51f22637e60f2aaffe3da8c0f6ccd5fb1e8e4815c9fecf2481668d47aa6737d741572dc243dfc7a28d396d8f6be3b56b19121ffd1b5a64e4e75c89e6474476450a6b25be2e263f5e2f75c86c226555deb1ef2411d12f6a104605784e76ca3888059b59cebc88aceba1a63090c5edc931ded98999ba4f19700ece51390b95ee0bb75ab7a63457af897c1d46d6f41c9c62e419bc85f662d6672810cc3e21c139bbfebb758c2b7f823d9dabc19831c8a9fabf54815481cf64765350ab161cd647b36542b645d2007095ba4123ba0a17e5ae0cdd86b978273144175a4a669726001640252a5224650c91364ab56a37427bda0bc6f373133b4d3a6c0a7f23ad834c13ee80b6a757397d07cfeee17de7c920566c9756eb207aed7273d30f644c834944c7a21e1eeabcb23a24a40e3dee572b130b654456ebd5de3e5006e8f295d296e8a71b8b288fb035a160f2e9b8e078cfac977c344594e3b77a32db1d018ed984a0e1b408df29b0c97ab9d9b69742c59f0d2b2f88fefd39e3c59e15f7cbe4c45963bfb7c700d9f1c6d5b3ce3741ae5fa4f368f769681807de1920d0c93f45cb360222ef1afd294dbe62a959c5fc494509820866ffc9296ba9234e934d6a4113960df1b92d4f6dee19a891ac80fb4aabf330a02f85b2037c60ab760c1f973588667de8ac4cacca0e409019e23280baba626f52f00f9e14c2aa9cf57d3ff63ba2937c3baa88e18c2918d99e63d4c847957db15308c0e6956bce5c5e27626d839c4481904bcaf540c8dd500094aa14d1384f004b44e8552b41ae7a2d06cdc50fc7d29766acbc6c4539392dd148c8bc7157087ef6488645bfe8bc9f36bb8ff60bda93119ecda42a44cf83b5b7ebac03ce54d4a32f29c9d2cdf8d55ad14721510e8", 0x1000}], 0x8, &(0x7f0000001c00)={0x20, 0x110, 0x2, "efb9563afaa2f7275cfa4d26b4ed6ae3"}, 0x20, 0x80}, {&(0x7f0000001c40)={0x27, 0x0, 0x1, 0x5, 0x0, 0x4, "671cd0f2d6235bc41d6574ac97f2403481a5574e77b42d79e775e1866e2d58c9128a7aa9b67d5ca09a305dcb8cce313a3c1eb5a879522430f906578a0e6205", 0x2}, 0x60, &(0x7f0000002d80)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="34c8218960e5a1f7fd9e2a6917cbf03c3d9f97adfce96c5c35251522dd976b3bb7ddede952622e407b412d47494b1f41ed10dc6f3ed81770cf8dde1f37561d5ace3e69d567d4d2702b380a4f039f81b44c51a3cb2d57268ffafbb3ac0653c0bb223a7e936592f132217a4bea8d6d9f6c136b3147af5fc7c3cd5b9190cc530591319f96c42e0e780ddaa2d5082507", 0x8e}], 0x2, &(0x7f0000002dc0)={0xe0, 0x105, 0x1, "df5735966ea87db1b1372f3bdc9e228bac1bb8f5c3a37ec8b016e5c78e0f7abb68a01e5abf9240607dc47fcd0f91cd3416ad1000292e2b45ae1477c6c8bbce8adb690ec480365fa4699a4d93e5581eebde3aa37c3d47ea740a09a50a540e1f31243a293662b379331af3665767995cf085adbadf03878889a2c48a2a5a551c92ffa9c8212845ecc90743df6dd47535837da9252f4d2605dd2bee3498ca83797c32f33ce6f9126bfc4429089f42ad1b29fccd1a1cbe6bb00f0cbf88f3a3c58b23d73063df35cf1207d4bc0b5c3e1722"}, 0xe0, 0x11}, {&(0x7f0000002ec0)={0x27, 0x1, 0x2, 0x7, 0x3, 0x2, "1924a676b0902ca2c1caf27cafd3351ec75d94ff119ea97bca12952ab0265ce00ebaff1df032f287eaf194722e87bd267c72cdd44cfb64546c7719bbf5a5b9"}, 0x60, &(0x7f0000003340)=[{&(0x7f0000002f40)="78b8af24ff9546a225a3805aad4d479b6357383ac557bc59585d6f3f29d4c7760f0faf5ea59dae6b4bab3f0984b7d8c1a72cca25d22f1c0379a197f1752d444e28aed0358bb18c888247a82963be3e34810cad6a11da52dbad9c0f1ac6351c15f9846cba3000fc794f18b560954af4881124aa15ca4688be7940b4a851868d3a6ff16180f141f0f43ba220a01dd567c004be286891642d446c47a7bac8f8919c41bde283f30403c079346255e513669a9ea2dfe05dd709890c453176a8bfa7aa7681871def512ff6795011e1ee136ebeaa06fac418c211400565", 0xda}, {&(0x7f0000003040)="0491298f42188f018806eaaa5ed15f9b5623db228d4e80f3d7045ea09f01f5850b0dddea031ec7b562cc8b0c9e821b9ba721e75cbfd5f115276426fa5a3aef032afef8d2939214d9e8e26874115332e3a89d778cf5d63d6e2058160b6905ff9cc517568626fad9b7a06432b089a1c120a173f2639f7498f15a3c67f2900c2960c362a8cfcfa092c32fc5301651184c62b0a9271f9e8ec0c9503121b478", 0x9d}, {&(0x7f0000003100)="0e7e0e7b787b12af26360e6b331fb830d90f2fff", 0x14}, {&(0x7f0000003140)="d50dd3ef9d03c349e5099f6e04e42cfdddc7e7aaed9276f4e0cdd6bd8b7655ac066d8035b3b61a5c675110abc3a741218d780006562661efe259ceb369fe742ae37a750627dd3047b0011b427ab66338dc3a51c07c83757a0a51f3ebddd2bbdb657bb8ef2cbf57d4e9c5b6eca3921b98ab5dacf372bd7982335a19ba9297c737ec5cd87c1b394144e68e24d1ba92dd9c4fa92776c4a4d504019855af1f2f74a1cfd806d39b67993d24771bccff4a1b52b03bf5a41270be7176b5800d", 0xbc}, {&(0x7f0000003200)="bad0", 0x2}, {&(0x7f0000003240)="aa8b92f5159c7becab12c4732d37fc610b72eab976a75ec6ff070a66e97f891e8e859042212926b936cefd335d78bb7dccf382d3cfecd0253a469d4e41cb29b0af022595e5742838ded02fa76d61965537462d2708243e217bb14e3dd72fa39546fcac3d2afde2d041f73186ac03e6cf4e6916afa75bd921cf6ebd0b6815367a460bceb3766f943da5ca7e666cd36fb0a9487d4d1c17c21f01a21ef59c097fbe08233d3d739ced35a9c055afdf683c32248f153ce8505f558e8373786fb5e6b838a3332242da048f3b19b5b7891b5352cd2d1a3058544ccfd8b456f55f60e92cdc240a730992c2e5f138be762ad5c2b1326cc6349447533d594eca", 0xfb}], 0x6, &(0x7f00000033c0)={0xb0, 0x11d, 0x20694000000, "c5939a2da72d9d3783d8ab8004d99b925df7bc4662ede475a03059921ce34fcce7fd30e1b873eabea1b3ae0d0c6b54b68fc7e7d1f21e98e742564c351f54eea5feda3a51c3453659678bd753692101a9c988e643708eea6acd0df01c44116d9d60b9e65f490fedd324016ecfb8fad6de249a489d812bbe256a559a4b806c329f24a2ae66c3ff8d869f9337c28754733fc30db46c926356bb86c6042da0"}, 0xb0}, {&(0x7f0000003480)={0x27, 0x0, 0x1, 0x1, 0x5, 0x7, "d0a500f170bb3cdf9a92167c108e6e8eb0449831ff217a30fd74ca327496c6853bed3230b02165b0519e14c4fd7ea0b7ad1423f1e2c5ef708941b0f94a34f7", 0x9}, 0x60, &(0x7f00000035c0)=[{&(0x7f0000003500)="973f2402d852f314f61ae1cddc728dbbc2093e6a881c5382c209229b924b64863924c060ce34ecbc55a08365c91fddeb058aa0feca60bca7495ba137a54369d419f53e964ef0f08e76a1a966cc46d9e2b245129e9cc69659fe0bd5fbd0fde7354830cd15fa822e91f6bcee3f77a16a38148d5bd06c031673915bf08ecb7051178f4ba49b3799c2385c4fd3a4d3fca973b5be7e636769f4b50a95fb54e294", 0x9e}], 0x1, 0x0, 0x0, 0x40000}, {&(0x7f0000003600)={0x27, 0x0, 0x1, 0x1, 0x227, 0x1ff, "cc91b9dc0d1628ea0247ae4d0985104e34390d17b06ca1b0cac3ad4a91e2f4949869a430893caf6f2a89ee8f11b0b23327600d5cf48c2e15ea7f85c62a0058", 0x27}, 0x60, &(0x7f0000004780)=[{&(0x7f0000003680)="d974a3277b3eb790dc0e6748e70fe70dcae10891e1f3c07e7bb46cefe546a50554f6491e16f91e445ec27f07d2f02bfdb3243f43e4eec9d98a7240df9fb69de8c0ed678406599d060d8d54093bd60df9e311668af192a2766229b6f6c71b5ebee15dd6798a6031ddd1fa79f4ecd0f7eb8b29d9c83b68dcd758cd025943c280ea09385ae597dabb8b88683736892468183302db4096d1cc886b9e7f927b3fc5707e0455a2cd1ebc64d9148c19ff5ab30ca9153fef886a29d85bf7849e7889db2aaeb842bdb41711260eac3bca98690badda8f25a485f6c0618bef2faf65375511", 0xe0}, {&(0x7f0000003780)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}, {&(0x7f00000047c0)={0x27, 0x1, 0x0, 0x1, 0x9, 0x2, "aa8f909cd3c3ccc1d7d58576aa04d5d6f9c1a4d13de8822555d60bbbd1813cb5abd62901d09ac172b753ccfbe173b2f93c5379f90103632b71b6c451ecfb65", 0x24}, 0x60, &(0x7f0000004b40)=[{&(0x7f0000004840)="b171555d15172bdebec835e7b4a6794c065a16473e83bd46", 0x18}, {&(0x7f0000004880)="0026772d04e3", 0x6}, {&(0x7f00000048c0)="cc98a9", 0x3}, {&(0x7f0000004900)="0f34f12bfac9a76352b110fbbd4a45c62826c8a0fe2fc5863db0c9a97056fecab1e3e5db75966777a13600952bd1e65f6fec8ca10e2b2cfacd45ebcf5c9b7ca4af436940c687b7f929bd7ee07de1e16e95eed1d2ab835b48ba55bb90b2a2606821fb868a4a8045d0cb5be9c7480de4b8d9b1ff77d0f45079d3f13b14fdee9e12ea05b2ba5673ac91361f461d964986a1277994b836fd47d972dc80e08f3184707d5180646ca083735d1c7d3c59d8d4e8bbaa65", 0xb3}, {&(0x7f00000049c0)="8057f4a01e545249812f010a5e7c261a4ecc5b87c5c9add5e1e2f60ad073b49d174413f23a1124156b733b60f710ed74e5c6ab73df88d734a3615ad437a3b6806f173caa60042c2bdbf6d34a0a50150d847e6197e79ae7428b354ed4957a780283307e0c1960dc", 0x67}, {&(0x7f0000004a40)="7ef98f7f52d03aeea04ef65721ccacec8e9f076fb9f1afd58b774bdc4525d6e6b81a3ca0d4f70ccf80337a3e36b906cc74cc1e4ba6fe9f7c2326841f3ef46da2f76e6001a0e5b6ff630dc7e5db4cf66415ef09bd817c9474bc88c73159de81747e1b203c567f67af33c7d60ccbedcfd3f9372a6511e0b8233567c6161c4faf21538819194a5d8e98a781561208a0cdd54f4e5682bf5177b5e4b8e07522652ef5c1a5ad34cd8f87a8c438927577e63b8ab1b0c9d8c3d379c8888eaeb966cca5d5737772dc04f820b4dfbd82cbadf8d9373413367c869879", 0xd7}], 0x6, &(0x7f0000004bc0)={0xc0, 0x10f, 0x5, "ab435f8802abcce8818a05fdc59d688a9dd74bf68036789deb6093e845ef60c08b59cb64fee9eeee68b672982f21617e74489703418f4bb6652135df94e2d3434681bbc04cc61dcafb0922384edce7df916aa4b8b84bd34ccc23b9996c160166f718144e61f12d3321416a84bb95c9c00e5f31656bf3af2cb7373cd917a847fbca7e53e8f335abbc1ef3023f3df0600abc2f67837935f51e9633a847917f176377f0edc8dae1e0b34844f7fdbe450f25"}, 0xc0, 0x20004001}, {&(0x7f0000004c80)={0x27, 0x1, 0x2, 0x7, 0xe2, 0x4, "4d8f6416f9258f646b1f4b6f64b0e8cfac4502ed6dcc4e0730a8d94bd193915f9e11fc32695689b478a21c0a0bd6d71be18d5c2efed9d0ec13c7aadfdff64b", 0x27}, 0x60, &(0x7f0000005d80)=[{&(0x7f0000004d00)="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", 0x1000}, {&(0x7f0000005d00)="0f1c70e6d3bc1d96ab79286430542534aa8f6539ee00e8e3543e60355cfcd4a92f344a90f248b56b32bff8a65f71c6e42db497358eb195a71e6735b001adbf9d65d64c6e9b470134bd1799f4645ebe8d02ce1220b13aa4cd8222467e81be74fdb727c9c21f3b4bc4ad6c696918f198136252cca8fbf0dedb6941e2c8a061", 0x7e}], 0x2, &(0x7f0000005dc0)={0x18, 0x11d, 0xff, "20dc1a1572"}, 0x18, 0x40000}, {&(0x7f0000005e00)={0x27, 0x0, 0x0, 0x7, 0x5, 0x100000001, "82105525f00b3f8ea55d76ebc093acb29949cd69e9a142415cae11eefc1d6fa942d3c739f303069743a1fac910e59345d3aa5dd42c89b2a685f8d51fec9d12", 0x3a}, 0x60, &(0x7f0000008080)=[{&(0x7f0000005e80)="108a25f784ed1fa2615b062d", 0xc}, {&(0x7f0000005ec0)="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", 0x1000}, {&(0x7f0000006ec0)="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", 0x1000}, {&(0x7f0000007ec0)="2607b7697e3b3f03da56305354fe8ee1cafd3b89b0cc257d73f5d1c0d6b658b4235686f65c1b1e94814c9452e6692662c28a554e99740ad2f448451ee03847036c0d6c84e390a8baff6f851c4e5c91dca264a15e263c313048f969d6adc251ebf6ab8f58226a76f2df46ecb8d5a23d818b33e9e8418811f9fbe199845410c72fc8b45411dbb82170e37a642d9d9f1dd5bed7aab7b0951ebea89101bececef28724efdffc8938c02344e52df4f8055084", 0xb0}, {&(0x7f0000007f80)="1297eeddcaafd18913915fa00d68fb33b4af2fb24b6ede64c7e4cce9eaae7328feed26725d0c0d7ef71030bbfad006d5723fcc6225bc931dd26fa42ebd0899cd31ba5cc08cb48a0731125e9dd39d846a674f1f70d442e0060fd76dcd2c680c60ff5b295d0cf94935caaf4cc4005f73f36b0df204aaa21b8883addf0686ab8d8068de2dcffb72f5e98e4cda615273f0eb2f653183a56787db3edfbabc872f3ad6a905bc28aa551f0a9abe540d81c10d13c58f2ed84232e17fdcaf3e5353e5efea7f", 0xc1}], 0x5, &(0x7f0000008100)={0xc0, 0x117, 0x3, "241ff66ca0a4681480542c6532c496b3efc26008d7b519bdcd46149b713f58f04cfa62ef6f974afbac9828b32e795e705fe11a6a0ee49f8bcfe4cef428b7948f8852147d58b7028e231e7ad77ba649c63c38bc358a9a22b148aea95130c57bca663bd862603359f04370e329bb33cf5afd767b6e990fa38813d782abd387c2303a76b106f69fbe35e105d6d7f43570eb80a161d0c45accadcedcc7028fa5807005e2ea9b007dd7369d706346b68a731b"}, 0xc0, 0x4080}], 0xa, 0x4000000)

01:32:36 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r1=>0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x0, 0x8}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000040), &(0x7f0000000080)=[0x38, 0x78, 0x30, 0x38]}}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:36 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4410)

01:32:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x69c0)

01:32:36 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1000000000000141)

01:32:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x4)

01:32:36 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4f38)

[  730.423799] binder: 4671:4720 Acquire 1 refcount change on invalid ref 0 ret -22
[  730.431466] binder: 4671:4720 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf00000000000000)

01:32:36 executing program 5:
r0 = socket(0xc, 0x803, 0xfff)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x5, 0x1ff, 0xffffffff}, 0xc)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffe84)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  730.532354] binder: 4731:4735 got transaction to invalid handle
[  730.538850] binder: 4731:4735 transaction failed 29201/-22, size 0-32 line 2834
01:32:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x9effffff)

01:32:37 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
readv(r0, &(0x7f0000001480)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/201, 0xc9}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000001340)=""/104, 0x68}, {&(0x7f00000013c0)=""/189, 0xbd}], 0x7)
r1 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24, 0xfffffffffffffffd}, 0xfffffffffffffe74)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5cda, 0x9f, 0x0, 0x1, 0x0, 0x1, 0x4, 0x2, 0x0, 0x8000, 0x80, 0x4, 0x8, 0xffffffffffff0001, 0x7fff, 0x1ff, 0x4, 0x800, 0xefca, 0x0, 0x88, 0x100000, 0x7, 0x3, 0x40000, 0x1000, 0x1, 0x100, 0x0, 0x10000, 0x7, 0x7, 0x9, 0x2, 0x9, 0xc0f, 0x0, 0xfffffffffffffffd, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x8000, 0x193e, 0xfff, 0x3, 0x1f, 0x0, 0x3ff}, r3, 0xe, r2, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0x30000, 0x5, 0x8, 0x486, 0x0, 0x8, 0x100, 0x8, 0x40, 0x7ff, 0x6, 0x0, 0x101, 0x4, 0x5, 0xfffffffffffffffb, 0x800, 0x400, 0x1, 0x2, 0xfffffffffffffffa, 0x101, 0xe00f, 0x9, 0x0, 0x6, 0x3, 0x9, 0x8001, 0xffffffffffff0000, 0x1, 0x80, 0x7, 0x4, 0x1, 0x20, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000000), 0x8}, 0x10026, 0x1, 0x53f3, 0x0, 0xff, 0x8, 0x3f})
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0xa1d, 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000d40)=0x70, 0xfffffffffffffdbc)
sendmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="6394ff34ae2e5f88c8b2c4e4df05fdab11740408490b702c44bf924c04f2d2ac60b61b362cec155932f1eb2d0176269bf62d002da8a85d4dda6253f1f271041dbf88f3948773f142", 0x48}], 0x1, &(0x7f0000000680)=ANY=[], 0x0, 0x4004000}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000", 0x1f}], 0x1, &(0x7f0000000040)}, 0x0)
socketpair(0x0, 0x0, 0x9, &(0x7f0000000140))
socket$kcm(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0xfb, 0x40000000004, 0x201}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f00000002c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f00000002c0)}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001000)}], 0x1, &(0x7f0000001080), 0x0, 0xc000}, 0x80)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000240))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2c)
mount(&(0x7f0000001540)=@sg0='/dev/sg0\x00', &(0x7f0000001580)='./file0\x00', &(0x7f0000001600)='romfs\x00', 0x2000, &(0x7f0000001640)='./cgroup.cpu/syz0&')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0&', 0x1ff)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000480)=""/22, 0x16}], 0x2, &(0x7f0000000940)=""/220, 0xdc}, 0x0)
close(0xffffffffffffffff)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000001500)={0x100000001, 0xb498, 0x1, 0x401, 0x7fffffff})
sendto(r1, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:37 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x68d0)

01:32:37 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000f80)="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")
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="24ae378ef81614f0c2d193d7225ecb8a5d2a2f9fd519133d5b17225448b9cf9e13a95be408966e5f01c90a93d62a7aba50f568b187b5dba04ac3b34123a66ec7707c3598b432859a3f24e3f772a33254ea86468874faf16f8e842a8413c5f5"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05630440000000000e630c40000000003898bc54daa04a265bf1a0ebe8a542cec601b748ac708d2ee43be846df2ddb416229a45fecd195fced9e5ecd9a010e41016fd311454500c9a5d624b1357f7ac65c5a1931d2259712d7c5d0a87572b4a3237e5be7550880d3f6e81be22690fab170d34eec6e60fdd37c557b18b64dddf2b74155ddb71b26ed77f4803e25472fc44296e882064a590b40d1e20a9c3211e8789f6a545663538992d4bbd5"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

[  730.619536] binder: 4731:4745 got transaction to invalid handle
[  730.626651] binder: 4731:4745 transaction failed 29201/-22, size 0-32 line 2834
[  730.647988] binder: undelivered TRANSACTION_ERROR: 29201
[  730.653582] binder: undelivered TRANSACTION_ERROR: 29201
01:32:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1098)

01:32:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x160d)

01:32:37 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2c10)

01:32:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xffffff9e)

01:32:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xd16)

01:32:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x3000000000000)

[  730.821147] binder: 4766:4778 unknown command -1908953564
[  730.826830] binder: 4766:4778 ioctl c0306201 20000200 returned -22
[  730.833804] binder: 4766:4778 Acquire 1 refcount change on invalid ref 0 ret -22
[  730.841482] binder: 4766:4778 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:37 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5850)

01:32:37 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
readv(r0, &(0x7f0000001480)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/201, 0xc9}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000001340)=""/104, 0x68}, {&(0x7f00000013c0)=""/189, 0xbd}], 0x7)
r1 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24, 0xfffffffffffffffd}, 0xfffffffffffffe74)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5cda, 0x9f, 0x0, 0x1, 0x0, 0x1, 0x4, 0x2, 0x0, 0x8000, 0x80, 0x4, 0x8, 0xffffffffffff0001, 0x7fff, 0x1ff, 0x4, 0x800, 0xefca, 0x0, 0x88, 0x100000, 0x7, 0x3, 0x40000, 0x1000, 0x1, 0x100, 0x0, 0x10000, 0x7, 0x7, 0x9, 0x2, 0x9, 0xc0f, 0x0, 0xfffffffffffffffd, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x8000, 0x193e, 0xfff, 0x3, 0x1f, 0x0, 0x3ff}, r3, 0xe, r2, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0x30000, 0x5, 0x8, 0x486, 0x0, 0x8, 0x100, 0x8, 0x40, 0x7ff, 0x6, 0x0, 0x101, 0x4, 0x5, 0xfffffffffffffffb, 0x800, 0x400, 0x1, 0x2, 0xfffffffffffffffa, 0x101, 0xe00f, 0x9, 0x0, 0x6, 0x3, 0x9, 0x8001, 0xffffffffffff0000, 0x1, 0x80, 0x7, 0x4, 0x1, 0x20, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000000), 0x8}, 0x10026, 0x1, 0x53f3, 0x0, 0xff, 0x8, 0x3f})
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0xa1d, 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000d40)=0x70, 0xfffffffffffffdbc)
sendmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="6394ff34ae2e5f88c8b2c4e4df05fdab11740408490b702c44bf924c04f2d2ac60b61b362cec155932f1eb2d0176269bf62d002da8a85d4dda6253f1f271041dbf88f3948773f142", 0x48}], 0x1, &(0x7f0000000680)=ANY=[], 0x0, 0x4004000}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000", 0x1f}], 0x1, &(0x7f0000000040)}, 0x0)
socketpair(0x0, 0x0, 0x9, &(0x7f0000000140))
socket$kcm(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0xfb, 0x40000000004, 0x201}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f00000002c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f00000002c0)}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001000)}], 0x1, &(0x7f0000001080), 0x0, 0xc000}, 0x80)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000240))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2c)
mount(&(0x7f0000001540)=@sg0='/dev/sg0\x00', &(0x7f0000001580)='./file0\x00', &(0x7f0000001600)='romfs\x00', 0x2000, &(0x7f0000001640)='./cgroup.cpu/syz0&')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0&', 0x1ff)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000480)=""/22, 0x16}], 0x2, &(0x7f0000000940)=""/220, 0xdc}, 0x0)
close(0xffffffffffffffff)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000001500)={0x100000001, 0xb498, 0x1, 0x401, 0x7fffffff})
sendto(r1, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x160d0000)

01:32:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1d88)

01:32:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x30000)

01:32:37 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000002c0)=""/211)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, 0x8, {{0x6, 0x40, 0x596, 0x66fa7f24, 0x7f, 0x2, 0xffffffff, 0x400}}}, 0x60)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0))

01:32:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf)

01:32:37 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2778)

01:32:37 executing program 5:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5058)

01:32:37 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8ce8)

01:32:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3a20)

[  731.535065] binder: 4766:4767 unknown command -1908953564
[  731.536267] binder: 4766:4819 Acquire 1 refcount change on invalid ref 0 ret -22
[  731.540669] binder: 4766:4767 ioctl c0306201 20000200 returned -22
[  731.554888] binder: 4766:4819 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xfffff000)

01:32:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf0ffff)

[  731.684981] binder: 4827:4834 Acquire 1 refcount change on invalid ref 0 ret -22
[  731.692615] binder: 4827:4834 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf00)

01:32:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xfffffff0)

01:32:38 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x2)

01:32:38 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e05"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x40030000000000)

01:32:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x74a0)

01:32:38 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x44d0)

01:32:38 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6f78)

01:32:38 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  732.410839] binder: 4827:4868 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf000)

01:32:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x400300)

01:32:38 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  732.578244] binder: 4880:4889 unknown command 1294
[  732.583253] binder: 4880:4889 ioctl c0306201 20000200 returned -22
[  732.591738] binder_thread_write: 1 callbacks suppressed
[  732.591752] binder: 4880:4889 Acquire 1 refcount change on invalid ref 0 ret -22
01:32:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xffffff7f)

01:32:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x34000)

01:32:39 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:39 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
getresuid(&(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
setfsuid(r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xfffffffffffff000)

01:32:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x12a8)

01:32:39 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5718)

01:32:39 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:39 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1b48)

[  733.302625] binder: 4880:4899 unknown command 1294
[  733.307669] binder: 4880:4899 ioctl c0306201 20000200 returned -22
[  733.314165] binder: 4880:4882 Acquire 1 refcount change on invalid ref 0 ret -22
[  733.321959] binder_thread_write: 1 callbacks suppressed
[  733.321970] binder: 4880:4882 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x100000000000000)

01:32:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x400000000000000)

[  733.431765] binder: 4931:4940 Acquire 1 refcount change on invalid ref 0 ret -22
[  733.439564] binder: 4931:4940 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf0ffffffffffff)

01:32:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0xf0)

01:32:39 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2a78)

01:32:39 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3bb8)

01:32:40 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2e52ed7fd719c70085420631e793aa0b0c6384174bf74f4b9a84c80f5bafe5fa01c69652512fa8e570e8f1b442330c227c30a8032ed8ee91372fb8ee97121cd9cfab88a80a23d9393b7f02eaf9218e12a8c85148856373780c01c60b7e5225c1021d25e582b820fe0e168e0fe5dac8fc962a3c"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4560)

01:32:40 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x300)

01:32:40 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4278)

01:32:40 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3720)

[  734.188127] binder: 4931:4932 Acquire 1 refcount change on invalid ref 0 ret -22
[  734.195858] binder: 4931:4932 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x3)

[  734.237308] cgroup: fork rejected by pids controller in /syz5
01:32:40 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

01:32:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x160d000000000000)

01:32:40 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x404000, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0))
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
renameat(r5, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x275)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x7, @empty, 0x2}, r3, 0x4de8a597}}, 0x48)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000600)={<r7=>0x0, 0xdf, "afd1af76723eaf35999442edf691dc6d1be4b165b73be82cf4a548b8704ab143d00bd7e37bf05de7b7c7440c573006c3d7494d251523c1ec8ec44180f5129d43df026fb5618462f6adda907efcd425a7f172897991fd73ff2a84d2e4dde26d975a9aa48052c6ceb374356189b6dc849510eb5a2a4925cd3af73a144fbd9d34c97285a0f1b1a0abe104ca480c54aaa248fe860e60fab9637d318c720c18ffd9dc91efd3df082dcdb7d403ede6f1b391b80c11ed466d3e036c020960a9d1ff07fb8fee6c1beae5217ebd97f7830239f625de33f6aec798783745e376e821f3d7"}, &(0x7f00000007c0)=0xe7)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfffffffffffffffc, 0x7, 0xcd2d, 0x40cf, 0x8008}, 0x120)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="0500007e79cec098f322b98f0700650d0000a0"], &(0x7f0000000400)=0xd)
syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80082)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r8, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSTI(r6, 0x5412, 0xb712)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40000, 0x0)
chdir(&(0x7f0000000480)='./file0\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca226807e72c0400002600fcff2bbd7000fcdbdf2500090000", @ANYRES32=r9, @ANYBLOB="0f39a25cfa91000a0004000a000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto(r0, &(0x7f00000008c0)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)

[  734.321350] binder: 4976:4990 unknown command 2146259502
[  734.326913] binder: 4976:4990 ioctl c0306201 20000200 returned -22
01:32:40 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x2000000802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@mcast1, 0x0, 0x0, 0x3, 0x1}, 0x20)

01:32:40 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x67c8)

01:32:40 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
r0 = msgget$private(0x0, 0x200)
msgctl$IPC_INFO(r0, 0x3, &(0x7f00000002c0)=""/237)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

[  734.387557] binder: 4976:5002 unknown command 2146259502
[  734.393242] binder: 4976:5002 ioctl c0306201 20000200 returned -22
01:32:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6810)

01:32:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x1000000)

01:32:40 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00')
readv(r0, &(0x7f0000f46000)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1)

01:32:40 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x33f0)

01:32:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0))
futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x0)

01:32:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x2000000)

01:32:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x9effffff00000000)

[  734.613601] binder: 5014:5027 Acquire 1 refcount change on invalid ref 0 ret -22
[  734.621753] binder: 5014:5027 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x20e8)

01:32:41 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x44a0)

01:32:41 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6948)

01:32:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x300000000000000)

01:32:41 executing program 4:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x7, 0x28000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, <r0=>0xffffffffffffff9c})
fcntl$setflags(r0, 0x2, 0xffffffffffffffff)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0xfffffffffffffe31, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x3000000)

01:32:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7890)

01:32:41 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1a10)

01:32:41 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4f80)

01:32:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)}}, 0x20)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0))
openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x8b89d10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x1c)
sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700fffffff50000e3ad316a1983000000001d09e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0)

[  735.414118] binder: 5064:5070 Acquire 1 refcount change on invalid ref 0 ret -22
[  735.421900] binder: 5064:5070 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:41 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6828)

01:32:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2880)

01:32:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x4000000)

[  735.617640] IPVS: ftp: loaded support on port[0] = 21
01:32:42 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x45d8)

01:32:42 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7ae8)

01:32:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
init_module(&(0x7f0000000080)='&trustedGPL\x00', 0xc, &(0x7f00000000c0)='-\x00')
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  736.205779] binder: 5064:5074 Acquire 1 refcount change on invalid ref 0 ret -22
[  736.213420] binder: 5064:5074 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:42 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
r1 = msgget(0x3, 0x180)
msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/185)

01:32:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2c10)

01:32:42 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2cb8)

01:32:42 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5d78)

01:32:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x2000000000000, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  736.374852] binder: 5126:5133 Acquire 1 refcount change on invalid ref 0 ret -22
[  736.382608] binder: 5126:5133 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  736.856539] device bridge_slave_1 left promiscuous mode
[  736.862064] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.905128] device bridge_slave_0 left promiscuous mode
[  736.910605] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.401518] bond1 (unregistering): Released all slaves
[  738.412770] team0 (unregistering): Port device team_slave_1 removed
[  738.422718] team0 (unregistering): Port device team_slave_0 removed
[  738.431715] bond0 (unregistering): Releasing backup interface bond_slave_1
[  738.476542] bond0 (unregistering): Releasing backup interface bond_slave_0
[  738.557217] bond0 (unregistering): Released all slaves
[  738.674133] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.680840] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.688262] device bridge_slave_0 entered promiscuous mode
[  738.725604] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.732027] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.739275] device bridge_slave_1 entered promiscuous mode
[  738.776396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  738.812759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  738.924757] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  738.964037] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  739.138285] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  739.145756] team0: Port device team_slave_0 added
[  739.183247] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  739.190652] team0: Port device team_slave_1 added
[  739.227763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  739.263449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  739.291911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  739.320076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  739.584302] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.590795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  739.597437] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.603799] bridge0: port 1(bridge_slave_0) entered forwarding state
[  740.388490] 8021q: adding VLAN 0 to HW filter on device bond0
[  740.463354] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  740.536775] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  740.542879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  740.551432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  740.618574] 8021q: adding VLAN 0 to HW filter on device team0
01:32:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)}}, 0x20)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0))
openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x8b89d10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x1c)
sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700fffffff50000e3ad316a1983000000001d09e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0)

01:32:47 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0)
fcntl$setpipe(r0, 0x407, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d0005000000000000000000020000000800030021000000bbbfa87d8acc822588c52d77ceb7d987a3c55505eca4225e77cc8764d9544757a04f4b0aa384423c9193591cf2835ea96562193b41570cae6a238dbab75efd94037088822d98e74270acbadd42b50042a5ccc9ea4416def5d3a4"], 0x1c}}, 0x0)

01:32:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1728)

01:32:47 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1998)

01:32:47 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2bc8)

01:32:47 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mlockall(0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x7)

01:32:47 executing program 3:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100001, 0x400000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x202, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x2)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x200, 0x70bd2b, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x20004800)

01:32:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getegid()
r2 = dup2(0xffffffffffffffff, r1)
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@noextend='noextend'}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@access_user='access=user'}], [{@appraise='appraise'}]}})
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000340)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00007c040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48)
write$P9_RMKDIR(r2, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x96, 0x4, 0x1}}, 0x14)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21}}}, &(0x7f0000000300)=0x84)
exit(0x404001)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  741.329616] binder: 5390:5406 Acquire 1 refcount change on invalid ref 0 ret -22
[  741.337254] binder: 5390:5406 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1170)

01:32:47 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6270)

01:32:47 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8610)

01:32:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000da41fb52121ec7602000000"], 0x1c}}, 0x0)

01:32:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)}}, 0x20)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0))
openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x8b89d10)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x1c)
sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700fffffff50000e3ad316a1983000000001d09e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0)

01:32:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1a28)

01:32:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8)
sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="540300002e00000426bd7000fddbdf250d00000008002d00", @ANYRES32=r1, @ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000000280)=0x5b, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:48 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1fe0)

01:32:48 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4080)

01:32:48 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={<r3=>0x0, 0x40, 0x2, [0x4, 0x8]}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e21, @local}}, 0x7, 0x7f, 0x81, 0x5, 0x7}, &(0x7f0000000180)=0x98)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1a, 0x5, 0x70bd26, 0x40, {0x18}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7950)

01:32:48 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7ba8)

01:32:48 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x55e0)

[  742.097019] binder: 5390:5463 Acquire 1 refcount change on invalid ref 0 ret -22
[  742.105092] binder: 5390:5463 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
dup2(r0, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
tkill(r1, 0x1000000000016)

01:32:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xffffffcd, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1}}, 0x11)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000a29bd7000ffdbdf25020000000800060007000400030008000400050000080004009c066a530000b52cfb66965331b219bb7ccf90a83f3721859b09ef6658692a8d13edb0c8798b53a90e6b79ba7ebfa842497f235f1da70f77802ec63e05af075afb7f01a265ae8f0422911566897a8ba8911b2cfc85d331b15c05a20b5cd6dcee9b6ef5737e8a2761719ec630883e6a5f40e1d5fffb5b7e1d0110"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
flock(r0, 0x5)

[  742.232532] binder: 5468:5475 Acquire 1 refcount change on invalid ref 0 ret -22
[  742.240330] binder: 5468:5475 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x10c0, 0x33, 0x400, 0x70bd29, 0x25dfdbfd, {0x14}, [@typed={0x14, 0x30, @ipv6=@dev={0xfe, 0x80, [], 0xc}}, @nested={0x1090, 0xc, [@generic="bfe78bf4c29ef7f0f75a1da17cbedbe316636d7b78f86d636559d12b6d2446e3e4fd1dbb59d6a567fcc50a1092ec19d6897dc83a3f42c36bcb235eac84bde3304c14edb429a0e4a8c1af8da4db7339d9f9139955b51783f2dac0aae3f530f300311f7382b6aa183aa2f08bf05392f72d9f1bf1", @generic="51183dd93f4db0f4f9bd01307c8fd0dea66909a5aff6ec21759172fffd083a0822975ff5c0927568ab3e0d3d87aa76d8f0b795e323b1eb9a89e3639d1b10075c9972b6d995ac30a906d1ccee7efc02c9ec967d8655aaefd57430f238988791088eedbd8b53d2f0ff86e5b9973fc5c5e583dacfbdbc6c3a68614e8992dd21a8f2458e5359928195188cfacb4c2e19a0c93d4a7793798bc02addf061058cb571d0eaac9ac2030c588b92a434e5fd396265959649b752e11df013f96cd801f16ddcc5f69a61f1e80b026371838bbafbf1510a37139bcea9c45471dab3fb10479147d88afa4cb01f84ecf185cadae71d21c8f2381ed627413626e20dbcadee032af6e13ac03ef97b56abfb22bbb308a242eca7a4c14b45b9072fb3a1004ab0a0efed85b5e189d37634f2d07ceb6d7fffaba0b7b29c8186d5f8ffe236e69e59b3a7fcac2269f2e9c6bc477165d2ff0c118386e6c1d327785cddb8e870300cd054fcfe246bb47f97105d775e2f4be20dc49a7cd0ef65094c9bf5ec49fff02fab000ce0cc9a47b679787fcb4e72f785b804725b7d27d9e2b275e59ea333a8a84e4376ffb459b040ad3ea8cef380b55a04156450bd127f82b6c2a92747d7d90f4a586268caf969c415e56fbcc704f1e28b17d6b5f51fb574446cacb8880fa1c64f0afba67846494cefa50ff5c831c23ff0d3e68838cfe417ee2cdd60d008e837565f168f2b5792f00294667c0ac70bd96948dad05ddeffca4e8c676f82849f83ed47e4065872c820f8c976eb5f00b6edfed940d39647646e2eafea6eccc99085c334162e92927247647b05eb0014565a200f5ec0364e12f5e23c58b3751180c4797f2dd59e249a13752950d676e9a1ad9ca032a3672d1064758432d209d12f48ea47cdbd142fe5259bc203a12a563d78d921d8fc98627d6a67641308afb10f1395c0600ccd33006f8fe31fec6f6f2127a5510c639632e006ea9c131dffe6b84ee1961df23e7b9ed355a7c2300c006f19d5103ee64399b72531504ed10b5197ce04330a1b43487847f5d98438b3545ccfe0f0d439f0efd9c2d7b0d0ede529364ef461a3d135d291e82446b86f0404ede671b8c4ab26750fe4d11f847975779f0ccbd724a0c7f740f0b35a8ecbe00610597edf99ef3d6c0e96cabd1ee8c613fbc6359021185e9193158db29cdcf397a477a2e4fc0867b1699a889aa2e8f9bcc2455e4b0540faf68d0c7039e853d530c48866bb6cd479606fdfcc7d5804787633514d8c8db85849b7e4daaa77024ef53fae4795e7846fb0b06bfa94c1e6d811f4962c811d841f0155673024ac846d81b01c24194746cda15b79cb6c9c075da07cf27ca14f31ce4ab178174714724d4ac8c6127c13eee2a384eb6e4a930b2ffc301a19e1f10b808a4f309eb01c9c4303d650d2768f87431d2a2bbddb77286b5bfcab1357f08992a12f8601807fc46e9b843b6459b160e3b45548aace6dff47dd14383fd4208ea58f3924ca41dc4b7e66592b24a18c1abf7c6b845c5f1317db82cc60647a86113587b8fe3cdab2e61a8852eb991c1859e843a982416b136ce4dccffad6b8742860f9a16b2eee16acb004952c8d381b621ef9c1dc98d8a96bd875b4b2d04bc1c446418168a94369b8052e64322a8e6024ffbdb7e593c51843ccdf7a02e25ec37a17e2f714e70080c1fa2e6b15a58a4154d331f638a489d82295ed452a9c51eee56a68b4d0a21c4212f0fe4d1992ae44b75edeae27fc491a1e437c93b20de039271dc7c820ad72ecbe616d750a3cf2de896efef4b795b1b9cb4e53166b1033835cbb448cba0edcc7e7988d83a1fc1fba86bb73a81a23149e7eaa27e966d2824cf0dc8288aaef6dfe7900b6f7ea497eba63285cb56a751912e89c15355d5e2ebcd06238c3615de197c66c3751ad5039b377000f4a90ae0cc7981050d7474c3ded4d2c7a2bcec9fadb1771d1c340b39b649a9d70dd728bb2688b234f106103b2d9e35a5fea743727a38a71e8cf3292693aff3154d84b25c72c2fcb00f499c24ba7beb693d245982fa10cda71571de7df672b2b807c7faf89e9797dbd73c960abca3b4a603d66718dddae525a76ace508256746da48814dfa21ba89244f9ba620679d0015c389d1734c6813822bda48f564a9d8ce33c3b46e59c5cf5503a18b5976fd8bc36625db4235274dfe6f3a84577a51fd16bd5726abe42588157fff434b5088d16debbf623786ebc972edfce2e5702e93606df6f582782e7630d010cc3a893bee778d541b91b556eb736508d4edb600ed8d63803cd50a022268e2640441c2461930964b102ed13633958c3ba0fe9ed10281c2d69c37fa22f5850a0215d42a0a2ad794a8b367fee6f27d7a34028fcc995fc5e347d34a3f7f0c3e4833ad197b7086e9521525d8ae46b71dec8eb5dba58f015f1614b0ab9b85e9a96c2ed55b08c824ccebaa6ec535997d13e901027c0ee9350c3dd63f1af8b523060d46f7a7cd6ca9c743f1c5b6b326e8ed5779290644675ab8fb564feab718488e840d390c707b8bcfe31ac3343054f33b6aa92cccae4a2f82fb0aafb364cb1593290b8c723de5b9b2e65f7469bdd423d62e11ad8802af678094e7097c56ca685c24fbdc1c0d8df65b811a69e141da9beb3a0c02abc4f739e32f2205d55c03aa02de753b584a72447947725d04bda28fa50adf84bfc87eb9c14ab95fafad7b5d1dfb5ebdecee7a538b2cb2439ab0fad9ec705381d0385266e0420ac1c6509bfb27dad963bf602ed1232641286a10abb65dec996d60907c80d0790122ed70bf978e6539cca329d1092d2ddf0f8cc30c57acea1fc93af6a638023f765dd65159e98e74ecb3dc5f68481f8074fee3a46a9ef2399fb031a7fec1811269b8f2e67e27dd871ac5d0c5fbfa2dfd9386f0f691899fab6beda1379bfb074f92a3adaeae116705cb54f708f9ab6ce96c988c61b7268b3f0e14b2da83c00134345a952447f97271d531152603c52a0a665b55e5694d93376df141c5e55b291f3689c2a711309e8dc66679a94fba9f090a653bfcaa021a3c63cdb5a9488802d16e1d412945b70ea44e2ad5479aeba481adf1e69a76ed4b19de432d1b82dbc1812135bcc8272baafd3c8e0a0b26caf4345e9b771d3c0e6130afc61abf4dbc35a46316326d321499c2f0db2fa6a9ac161b8a30f323a35423ca05386a752c53cc03ca1609afb99262affff3f344217ecdaaf3de5cbd44d663c3777c7f75be2d2c6654be3d62b0a9e626e6b92ba22de81496374166389d9c136c3df56a60c75a1142ae3f2276e03bf5cd81c7f6695b68e7b2bd58d9462bc1fa68084862e03e05e8432887914185be34d136b6e21e834a03f2faeb0dbc0d3551ec9bdb767c81bbc0815951126d2df7d1a1707961bd51b43e44e36bba169a4d9b48b99314c3d8d1b5aab8bec907113d2b26c8d60a9a63fb6f6145d7db164c1be62052d62d85af1a808c8a2947b003d21246f6fa51bb11de5cdceb037696631366b6ffe852024509f9163a34f87ac73eedd76b07118c04c604a80168d4d5fcd71e7847afa3ad5f6bf7d07b39dd6e81c1508187f127e5c9b77f7f4664c70488a503b530d02c46ab01c0d76cba2ef7b96bb03d2736dcae47e1546d8fbecfe9190e9580934749a822fe6116b825b125d02c014c39e01f3b6af488f0513a032fce8c251597bbbd9ca15ea75d1094aa322fba36e71ce5a7cb295d855c410b2cfbe077f8d482685de0e0055c6cabecd18ce3ebbc6bb26ca17177aeb854074a48a4f7cda23d8f11b1fdb95904d1e7901968270253669db19c0d6e45ba2242441f812e9d7c3a3a7ab18e5b6530a3bcdbfc2310bf8dbb5167fc304ad924e6e7df0eb1fd97097f3838c036173bfd9365adaa87c602a02d1d7891a2bce412037c7630a27de17b51a421b05915069872c54391198c0b7b6ca31df73d9903eca4c161d4535bccdb2ec5b50da9c08a39a1b4022cef3032a33f433adb52109f361f72e3d76b061a9b600441f6296b7d85b884c22c02fdb2d1865bc3edf3543919eb46ab48557af4f70685a3554c8f36f752075aeabcc2303b25098b00de1a6f089a3b6c51ee08937dad649c5b66f855c4da1b7f6ddda5c79edf8dad0a8bc8f59b94ad12256f28f757f9611ccc68cc89f0679429c028dfed9b2304857b0c65a00bc129c0d6452a226b5baeff91da135788e2aad386a43f626fb3f11c9934d85e582a8fc997095861ac2897c7e47dec0b5a7e38f94d3ca9cf397af999f512eb5680e0fe20c445d4614b5ac0323c6974728fcac1457d42e0a9074427afbc14548468de4aa159de35722bce43d1a2a658198f76ce0912d7266d13d12916711f871d6624a52b99900296e9a228963c215b09b671536b5e9faaf3f1076715cefbf06f258720589728da1c2b1836ff714d5e4c0994242419c917ca757ff8ac891e030eb63eb7cf5e7262c5e66cf535d1abe0db4675556a630a59b9d0a4e4404aa3484dc35398eb6886ec3a473226d6552d892a0c54ba5f37f59c2a4490da8058375d547941a297598eb4040232dfc2211d6a0dfe1b56d3f306ff610a874156cabb3899b4caeed7cf661c3836f11b4ffd7a3935ca031660567bf415cc5f9538395c2ca56061c8809d440a4c0dc88caa96af6bef2767711788ec4827c8e80b5c40abaf2e95d10fe1c7ace05de442bfd83e1779842824b946c4699ec22d7d354002ed807d007755ddbb0f6f30ed4b0aea4d885a85b0ccd250b35f93a3c3061bb938f9056e0c32e7840ddb8126449628186ee40189e2ebcab27224345588cf352d3d0a504af1cbf6f8787596f2f83b3405564aa83daf6b40e4be8fa405052aa7d187e14a17fbb9582cd66925f519d4e6db6ab620ce064715c5ed6639bdc0a3f513c9aa66a315530002b5b2ea9330c93430cce76e54a7819c8c541bbff0290bbddfa13c8c73a83987a7c1fb997c0e6e249cbdc311fc73d0495bb4742dbb17c39f26dac66fd5ca78153ccf7e724c0f2e7b61a105e51d0cf58b89a87c32a570124d07b7fc5077b15128475cb30eb48377e89d37530238113fa59686060e4f10d55f590d1675d2afb7ee51501dcb4beac44419bdeef9dafb3871a21964dfa8abe6e400fc39deda66aeec969588c1defd84395823ac6c9539ce7865c7ee85886a6c46e52cc3686a672d8d2491a7966024cca0d7d49523e0c0bfd408d09ee2a9c42252a625dd670f615496d974c0258ea82dc0e3f2e3ea01894e24b6cc805d16fd80e9b4d65b25465627a0adeec78264d5f6a3666127f76f383a771acccc7c60122975be4ed0f624925e50fbfeb6e0a55c1f408f8b8218d3e9fda4ebb21bb46a21f3ae6e400611d44f0cbbb2e2a0af75ed3d9af55463f07b2a84d84d326ca8b7dce9aed499fe5a5f5fae8de4175d8134d74fd46f2422094e9208241b4d5c14193cc5ceb3586fedb702ff1674fda23f45402c245cd3474c40d5c51844cd443298aa7ffd7d76ea935a3cc3b80ee724b0ec7037917baf68290642d7c67582deb089c709e17903d2db016648af3f11a74b69cb294584fca648918e2174528e306ac4dd590ca2c554122458169d8f183fcfd0f4ce0ca02e7f6318db34a44a390863e995c4e6f9ddf851f73370d332924da6a2ad26995898d8e4083220d913d1221d0a330b24e070b272e83a2e33ef8f62be759b472fcb08f70da68fd3420e8aa3bbe5cf03f1c870d59a138d412a7a55d811ce3e07ce192560d5181c65d1a8181b5d7018e25164a0bb0606cf2a878d001cffd98011197bbc075202e0fb3be100d64dab40952f76acb196", @typed={0x8, 0x86, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @typed={0x10, 0x56, @str='GPLcgroup-%\x00'}]}, @typed={0x8, 0x23, @fd=r0}]}, 0x10c0}, 0x1, 0x0, 0x0, 0x845}, 0x80)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001d000000000000000000000000000000"], 0x1}}, 0x800)

01:32:48 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00')
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x10000030}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380})
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100))
preadv(r3, &(0x7f00000017c0), 0x1a4, 0x6800)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x80000, 0x0)
write$FUSE_INTERRUPT(r4, &(0x7f0000000240)={0x10, 0xfffffffffffffff5, 0x5}, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000050)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000280)={0x85, {{0xa, 0x4e24, 0x0, @ipv4={[], [], @broadcast}, 0x1}}}, 0x88)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:48 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x100000000000002e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x36b)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{}, {}]}, 0x190)

01:32:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x3ff, 0x4000)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:49 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563044000300a630c6901000000"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:49 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2af0)

01:32:49 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)="2f70726f632f7379732f6e65742f697076342f76732f706d74755f646973630088b8eb49459f4f445d42ff50a38e1cd40d89e2a4a070e7c0339ac628f989c5dcfc520a9335e48b43a2559c34e881557d5953da4c18d0e4e28ca5b43e8b9cba64fe80656d7435d3b618f1175833c2d8605a58bab9a33f81dd53c54badbb49959093d711c1d8a75b3b13999002e54ff40267a15a203eea1759c909b92ee607756269198e71231f39505345777f44f1b681efdf9a628abdad3b0bb88e369f4ada140132", 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x102, 0x0)
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180))
fanotify_mark(r0, 0x2, 0x10, r1, &(0x7f0000000140)='./file0\x00')
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c003d91f53cb84cb6252bd4fb2b003f1b00000002000000080023001700ff0f6030f708b5e07cffff8124baf9c4847fae2c066202cb51fa1636cfa192893ebb6c42ff3d6c98a04b94a3d5a76213bf469b913934a4c4e316f0546cf66d2b"], 0x1c}}, 0x0)

01:32:49 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2a18)

01:32:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
geteuid()

01:32:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6168)

01:32:49 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  742.985473] binder: 5468:5518 Acquire 1 refcount change on invalid ref 0 ret -22
[  742.993094] binder: 5468:5518 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x37)
sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(r0)
accept4(r1, 0x0, &(0x7f0000000000), 0x0)
recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0)

01:32:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
fchmod(r0, 0x21)

[  743.112962] binder: 5531:5535 Acquire 1 refcount change on invalid ref 1661612032 ret -22
[  743.121403] binder: 5531:5535 unknown command 92428
[  743.126745] binder: 5531:5535 ioctl c0306201 20000000 returned -22
01:32:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0005000000060000000000000000"], 0x1c}}, 0x0)

01:32:49 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x360)

01:32:49 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x50e8)

01:32:49 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0x10010, r0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

[  743.197504] binder: 5531:5546 Acquire 1 refcount change on invalid ref 1661612032 ret -22
[  743.211837] binder: 5531:5546 unknown command 92428
[  743.235922] binder: 5531:5546 ioctl c0306201 20000000 returned -22
01:32:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4dd0)

01:32:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0110000000000000010000000e00000018000000ff"])
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x48c]})
rt_sigaction(0x38, &(0x7f00000000c0)={&(0x7f0000000040)="c401885d0466c40295bce8660f7ea80700000036f3410f5dc7f243a744a900a09e70650f28fdc4a125fec2c423a50db1c1a664c03244d7", {0x6}, 0x8000000, &(0x7f0000000080)="fe0441f68565566666f8c462f5932cacf0011ff7d1c4a2e0f352c3266566450f3a15a00d78000017c4a2c13e4faa2ef011b30000002036410f2c07"}, 0x0, 0x8, &(0x7f0000000240))
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000200000008000700210000006c4967ca53e0665b0e310eb7d8da959ff4f167b607c3b9cfa30f2a22e8b8be8ac53faa93e01733fd5ab2d9fd7075fd98930d8da85ad4b57679b6cd65496d4fad3d68add540cb59c4558db7b5830f5b59439e9880e10393f56569a6547668fefded63a7ae888759869003a7816f11ed83c4"], 0x1c}}, 0x0)

01:32:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x37)
sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(r0)
accept4(r1, 0x0, &(0x7f0000000000), 0x0)
recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0)

[  743.392282] binder: 5570:5585 Acquire 1 refcount change on invalid ref 0 ret -22
[  743.400016] binder: 5570:5585 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x40)
write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x4, {0x5, 0x0, 0x3, 0x6, 0x8, 0x5, 0x6, 0xfffffffffffffff9, 0x1}}, 0x43)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x40, 0x4)

01:32:49 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2130)

01:32:49 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5b20)

01:32:49 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c)

01:32:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x65b8)

01:32:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "69e4785c28b43eaee82bf8c9569780d76ac7c51a1f717d726444b5d5165c802481f5c3b669bb48cfcfee2d31ea04059c7174621448f440190cb0602bdef8de4de2508eb06efb894efe5a9cecee15e57d31abe8e41802c4cd24b9567cd627eeab7074d731bd233497631256805cd7005c6660872065de62571b77f4ada7d82d45bd007d61a6e348b19627df7925a80b9dff2192"}, 0x97)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[]}}, 0x0)

01:32:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast1}})

01:32:50 executing program 5:
clone(0x42040400, 0x0, 0xfffffffffffffffe, &(0x7f0000000700), 0xffffffffffffffff)

[  743.696277] IPVS: ftp: loaded support on port[0] = 21
[  743.743636] IPVS: ftp: loaded support on port[0] = 21
01:32:50 executing program 4:
ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0)
fcntl$setflags(r0, 0x2, 0x1)
pipe(&(0x7f0000000100))
r1 = socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @loopback, 0xffffffff}, 0x1c)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:50 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8370)

01:32:50 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2760)

01:32:50 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1800)

[  744.126651] binder: 5570:5624 Acquire 1 refcount change on invalid ref 0 ret -22
[  744.134273] binder: 5570:5624 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x1, 0xff, 0x8, 0x0, 0x0, [{r0, 0x0, 0x1}, {r0, 0x0, 0x88f}, {r0, 0x0, 0x20000000000000}, {r0, 0x0, 0x8}, {r0, 0x0, 0x81}, {r0, 0x0, 0xffff}, {r0, 0x0, 0x7}, {r0, 0x0, 0x5}]})

01:32:50 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000200000008dd020021000000"], 0x1c}}, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x10000)
write$FUSE_GETXATTR(r1, &(0x7f0000000100)={0x18, 0x0, 0x7}, 0x18)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0)=0x7fff)

01:32:50 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8c10)

[  744.244012] binder: 5635:5649 Acquire 1 refcount change on invalid ref 0 ret -22
[  744.251759] binder: 5635:5649 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:50 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:50 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2208)

[  744.330669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  744.365154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:32:51 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, <r0=>0xffffffffffffff9c})
syncfs(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x776, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8238)

01:32:51 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:51 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5ac0)

01:32:51 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x2000)
r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19ea4a23865559a14a7398f681d36d16caedcc9ec1252c5ed8cc8e2d8d524c3f36afddd44e6ef93ad9ecd52b6e9faced3dcae0c65d851bcab2086bb643c031267021b269a5aca064a09e97e4a139e5d020a59bba3db7608b4451d655cbb33aa58292a6192aa9a333f261e207663d954aa04e51a1aa1a28aa9081a951a96233c30d20c698030cc81fe874114aec8d65b2e4a51c1f55d62a845aa47acb858c9711548ac9"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
fchdir(r0)

01:32:51 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6fd8)

[  744.995325] binder: 5635:5676 Acquire 1 refcount change on invalid ref 0 ret -22
[  745.002905] binder: 5635:5676 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:51 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x6, 0x878}, 'port1\x00', 0x4, 0x42c, 0x55, 0x8, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x6})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d0005000000000000000000020000000800030021000000c330c8deff1aa4b47c479279e85aec3dfd68ed00c8ad60290bf715fd8cff0ef428c8150470b903006f7a57ecffca171c34aabe1b51d3792a9a5d36d4de9a0bf20323603a24180bf4fa9de95806d9967890f16251b78e1416bf07a16922cfebd725d7c5a22f8aca138cfe3f05c8fe33cac68c8259dd90e44ff2e5c43ff2139e94b0980c20d9c930711ba244b68bd672980e89a1548b87b8295887fe81d1aead8c2999501f80c1dd7907fa95c1c666ab7483d1e9ed3c137b63ac9fdf209d5f9a59f06d94e278a19b391a3acfedf968d44f0f5096421b57a0efa76fbc9127edede9d94a25387af3ee6666b2afd52f712133adf165d1d5bb3fb783eb8d5dc529c78c2d778b47b14a0a4f3d0093b562de50395b727fe96a515eeff90cdce200b3d1a948977c4f563ce21902297082573c110a458ac6b4619b584fcb4dac67abe419baa59f"], 0x1c}}, 0x0)

01:32:51 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r1 = accept(r0, &(0x7f0000000080)=@pppol2tpv3, &(0x7f0000000100)=0x80)
getsockname$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x10)

[  745.135862] binder: 5689:5700 unknown command 592112153
[  745.141399] binder: 5689:5700 ioctl c0306201 20000200 returned -22
[  745.155268] binder: 5689:5700 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  745.162287] binder: 5689:5700 ioctl c0306201 20000000 returned -11
01:32:51 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8000, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x6)
ioctl$KVM_NMI(r0, 0xae9a)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d000500002d000300210000000000000000000000000000"], 0x1c}}, 0x0)

01:32:51 executing program 5:
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:51 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000e630c40000000001745bcf0c479a252f74c23731660bd067285c7187bdd8d6d24a42e63f64876f3b7ab36094dd9ed2d2ed9e041f232ffbe261ea9e835e4050adae0444d0bff49cf637698dd879a3abdcdb38d905978b493deb5606baf4156e2d696e1"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', '/dev/binder#\x00'}, 0x13)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180)=0x3, 0x4)

[  745.247996] binder: 5689:5711 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2898)

01:32:51 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x72f0)

01:32:51 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:51 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3138)

01:32:51 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x80000000, 0x200)
timerfd_create(0x7, 0x80000)
statx(r0, &(0x7f00000000c0)='./file0\x00', 0x4800, 0x7ff, &(0x7f0000000100))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)

01:32:51 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x501000)
r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x20000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, r2, 0xf, 0x2}, 0x10)

01:32:51 executing program 3:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x10f680, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x80000)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000080)=0x60)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0005000000000000000000020000070800030021000000"], 0x1c}}, 0x0)

01:32:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000200000008000300217e7c37d73c8cdb47000000"], 0x1c}}, 0x0)
socketpair(0x7, 0x801, 0x1, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={<r2=>0x0, 0x1}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0x48, &(0x7f0000000240)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e21, 0x7, @remote, 0x6}, @in6={0xa, 0x4e24, 0x71f2, @loopback, 0x7}]}, &(0x7f0000000300)=0x10)
r3 = gettid()
sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x10, 0x400, 0x70bd2b, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x87, @pid=r3}, @typed={0x14, 0x84, @ipv6=@dev={0xfe, 0x80, [], 0xc}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

01:32:51 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1b78)

01:32:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xc30)

01:32:52 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r1=>0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', <r2=>0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r0, 0x0, 0x3, &(0x7f0000000040)='&:\x00', r2}, 0x30)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:52 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:32:52 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5af0)

01:32:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0xffffffffffffff6e, 0x1e, 0x102, 0x0, 0x25dfdbfb, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xfffffea5}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

01:32:52 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1db8)

01:32:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7338)

01:32:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000200000003d83f819e95dd4a5b6402ba319ad3838323b265c600242665f5ef70dee5cfc3cba50dda59b7331242b15c50ee6b979853ed1b445b80993fd4611ca5599c3cf4ded1ca321ec2f88b48b052167f63dc5ad727ba65ec42e63a8e2c25a13f63f400c45a14f137267adba794a75fa0abab94d60691f4376232be9143910c7a3bf3bccb2c0cbc3bb83cb7edc9834dde33d4cba330b1228cd5edeafea6d1b3963015036520914956ead9b5aa14755f9d5d5f49c761232cdf0b192d27834b491d00000000000000000000000000000000000000000000000000000000"], 0x1c}}, 0x0)

01:32:52 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0))

01:32:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d000500000000000000ffff000000000800030021000000437c2efa99440000000001000000520e18eddaf7f1060b"], 0x1}}, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r3=>0x0})
getsockname$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14)
accept$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000740)={<r6=>0x0, @in6={{0xa, 0x4e22, 0x7fff, @remote, 0xff}}, [0x3, 0x7e, 0x9, 0x0, 0x7fff, 0x97e, 0x10001, 0x100000001, 0x3, 0x3ff, 0xffffffffffffff99, 0x40, 0x80000001, 0x7, 0x8001]}, &(0x7f0000000140)=0x100)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r6, 0x5}, &(0x7f0000000400)=0x8)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x208, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1a4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x44000}, 0x44000)

01:32:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000001, 0x800)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'ip6_vti0\x00', 0x5})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000001c0)={0x8, 0x1c, [0x6, 0x7, 0x0, 0x2, 0x9, 0x5, 0x81]})
fsetxattr$security_ima(r0, &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "82b41c012a9e12262fa5aa72633b8aaf"}, 0x11, 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00009574fd04000000f300000000000200000008000300210000004e6c0aa3e6e39f1253c2edee2747c831933ba5ec74f67f48846cf1811f5d64b108dd03420cebb18b3f0000000000000001e457f370c2ea79e3745f62b1dc12ccfed64e291acf2b52e0f127ba8c91e68906bd7fe30b0fbb224718a463cc2fdb454af550cdbb58cee1228d032350e208ad65417b4c14023629ab"], 0x1}}, 0x0)

01:32:52 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3738)

01:32:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0b1c0000001d0005000069000300ef00000000000000000000000000000b343465bc6b82fd0a608bbdc83cee0a56b6e1c349b3879e46394b60fa38d9d67323246377755d"], 0x1c}}, 0x0)

01:32:53 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200000, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0cd300040000be04e835a499d010c8d545b7c7a35d86"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x3ff, 0x2, 0x2daf})
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r3, 0x8}, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:53 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0))

01:32:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1428)

01:32:53 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8b8)

01:32:53 executing program 3:
io_setup(0xad1e, &(0x7f0000000080)=<r0=>0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/195, 0xc3}, {&(0x7f00000018c0)=""/204, 0xcc}], 0x7, &(0x7f0000000480)=""/60, 0x3c, 0x7ff}, 0x1)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/vsock\x00', 0x10000, 0x0)
io_cancel(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000001a80)="6da712dc3ca3a3fe6aae6d0d2c455df32c7bd7ee5a3a730d236339b379ebe9bff9850c1f0aada93dd657b2545d16c2accf31ddc73721877af9bd5bedde5f29ef81515f2c1669cfff9ea0ebc6f0b34a93ade70a6c5d2182f29396048257472c31bd0429bc321dac0ab0b906ee4ced4e832aeda24ee9614105cab6a99b645c0de39c12743812b0cbb5ad9d5552c5274dc5b288a08969d7654381031d98df046aaedca199a07a38683efa74c082f0b07cfbbdd2d336b8bea6db785d8c2a27d15c64967c671fe258e278dbb6cfeb0c1ab8ae384a685d59486c9b695c779d427b1f65b658945c4687e7276033326ef12d037d7c9ebef9", 0xf4, 0xf5, 0x0, 0x0, r2}, &(0x7f0000001c00))
ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000001f00)={0x100000000000000, 0x2, 0xffffffff, 0xb5, &(0x7f0000001c40)=""/181, 0xd6, &(0x7f0000001d00)=""/214, 0xce, &(0x7f0000001e00)=""/206})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = fcntl$dupfd(r3, 0x406, r3)
write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1300000065ffff0080000006003950323030701f50bbc25898c03894e0877847fce8d1f2bb410d6ac9678d9861335cba8e2898d1311f56e7f811373bb164e90996"], 0x13)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x3, 0x1, &(0x7f00000000c0)=""/77, &(0x7f0000000140)=""/131, &(0x7f0000000340)=""/139, 0x1})
fcntl$setpipe(r3, 0x407, 0x8179)
sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:53 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x26b8)

[  746.947141] binder_thread_write: 5 callbacks suppressed
[  746.947155] binder: 5784:5823 Acquire 1 refcount change on invalid ref 0 ret -22
[  746.960147] binder_thread_write: 3 callbacks suppressed
[  746.960154] binder: 5784:5823 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:53 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0))

01:32:53 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1d70)

01:32:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x64b0)

[  747.062816] binder: 5838:5841 unknown command 67162892
[  747.068248] binder: 5838:5841 ioctl c0306201 20000200 returned -22
[  747.075875] binder: 5838:5841 Acquire 1 refcount change on invalid ref 0 ret -22
[  747.083480] binder: 5838:5841 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:53 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x4180, 0x0)
sendmsg$nfc_llcp(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x27, 0x1, 0x0, 0x3, 0x7da3, 0x78, "8e3c61af0bab1c9f93c9db28bea9c59b5a500c334b60c0b93922fae0a11b1c6de040d3f40c851bd12d342f08ed1e9ab44b07f6e334fac6e9f0ef2b8ba87bd2", 0x25}, 0x60, &(0x7f00000002c0)=[{&(0x7f00000001c0)="09f0441df5ae1cca29d4341dc33ab573a751106ba722ec82e13dcd89b3a89e2974319df20af845501dce45a1169a6939ced426144457712f86a870185e1dc4832e596411430ecc65488a83041a2bc2c2b9ab2e33b517b96fa500ba5b50b294eb9163e918a088c0bda6e194758cfa72d4cf0936e01cb6a1b67c81769b06511e2b09a720b1a86fa3528b6dd2cce0b0a3890c1831fc9566da4338f8e2e3202a4190b19582a187780f706fbbe3237f3bc753a0128bb1c54225d5cd23d8aaaecc61090d1d196c0499d09326165cefb7ba87e79846ecb97d239c1b5f5e5a24e8eb94ebafca55eaac3016", 0xe7}], 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x402042, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000340)={0x7ff, 0x8, 0x5, 0x3})
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))

01:32:53 executing program 5:

01:32:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00467a70f2f597900f60267d74e610a7e50615c60b0f5c31f8920503002100000000000000deff"], 0x1c}}, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1000, 0x400000)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)

01:32:54 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x5c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12634840020000000000000001000000000000000000000011000000000000000000000000000000000000003800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000000000000280000000000000048000000000000007800000000000000780038fb0000000038000000000000000000000000000000"], @ANYBLOB="fb010000000000000f630c40030000000200000000000000"], 0x0, 0x0, &(0x7f0000000f4d)})
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x1, 0x7, 0x40, 0xf62, 0x3f, 0x6, 0x9, 0x2]})

01:32:54 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x60d8)

01:32:54 executing program 5:

01:32:54 executing program 3:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00050000000010000000dd520021000000"], 0x1c}}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0xfffffffffffffebd)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100))

01:32:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x87a8)

01:32:54 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x35a0)

[  747.846356] binder: 5838:5875 unknown command 67162892
[  747.848224] binder: 5838:5851 Acquire 1 refcount change on invalid ref 0 ret -22
[  747.851725] binder: 5838:5875 ioctl c0306201 20000200 returned -22
[  747.865838] binder: 5838:5851 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:54 executing program 5:

[  747.906723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  747.944947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:32:54 executing program 5:

01:32:54 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4802, 0x0)
bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x1, 0x1, 0x7, 0x8, 0x4, "ad2b2b0f889c2d58fd8d2d076c26f610eba1681fa0b9f96c6a10a47e701999ada501961523f39871f30fb148be2457ca19c87ff7977f086d91cc821c1d905c", 0x3c}, 0x60)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:54 executing program 5:

[  748.003345] binder: 5886:5902 Acquire 1 refcount change on invalid ref 0 ret -22
[  748.011026] binder: 5886:5902 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:54 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4e0)

01:32:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = memfd_create(&(0x7f0000000300)='/\x00', 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000080)="d9337168f49bb18ef1a7d348a53152adb3ce57a5a5c2bba288a094f2b925ce4ba667c546b830cb33ab33ed81f071aaea626351f40d6c02287ef5cfba153ea6dd5df54d93175e196b4b791b20e56804f7922e122870959c657c73dfa311d98e8b5dc5d173bbcc1b9c93da73a12f9957f27e96a4a5ccce74d0cb5e46f91f92aedcce43fb386b8cf48cc7d1171e7dbdce2df1dd0adfa7cde4354b531d5b96387919b2928bc4fb637947ee51e3a53a043fb3b51cab50d8ec038c69a8b6690f314e60a7509e3ce88875d0e4b7e7494e70d09291b30b9e", &(0x7f0000000180)=""/254}, 0x18)
ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f00000002c0)=0x1)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[]}}, 0x0)

01:32:55 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c53857d525f72fad59a6bbfcb353dfd8963"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0xe, 0x0, &(0x7f0000000080)="bb6cb6377d40ce38be06001b0c16"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040))

01:32:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x48c0)

01:32:55 executing program 5:

01:32:55 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6660)

01:32:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d000500000000000000000102000000080003002100000052d65443c9f14b3e16b5cb54d05fb84a833f96ca9efe444e26c298b5c7507ddd2efd9ceb12418926344e09977606fb9de1b8f2ceee785fd51bedbd0539459c7d82228188d492eac1806f33221f59ceded85049c28b3bfc1ce72d68548923ec011ce5a339749d13646e5d49"], 0x1c}}, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x1, 0x1, 0x5000, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20)

01:32:55 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4248)

01:32:55 executing program 5:

[  748.727207] binder: 5886:5925 Acquire 1 refcount change on invalid ref 0 ret -22
[  748.734896] binder: 5886:5925 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:55 executing program 5:

01:32:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0007000000000000000000020000000800030021000000"], 0x1c}}, 0x0)

01:32:55 executing program 5:

[  748.862037] binder: 5936:5949 unknown command 2105889548
[  748.867774] binder: 5936:5949 ioctl c0306201 20000200 returned -22
01:32:55 executing program 5:

01:32:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = pkey_alloc(0x0, 0x1)
pkey_free(r1)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00050000000000000001000200170008000300210000009265eed6340af06e87221613775ab4a507b444f07cc4fe535f9ce1da0000000000000000000000"], 0x1c}}, 0x0)

01:32:55 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000200000008422cbf2b5b37a5b89b098feab8663bb34a3225c490049f7a9e40095959970476cf0944b806bd87b9ddf0283091e5518c7c708e0ff9f55670d65266765100000000000000000000000000"], 0x1c}}, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fstatfs(r0, &(0x7f0000000080)=""/35)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000540)={0x2, 0x0, 0x2080, {0x1f002, 0x0, 0x2}, [], "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", "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"})

01:32:55 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6378)

01:32:55 executing program 5:

01:32:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1908)

01:32:55 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3540)

[  749.593264] binder: 5936:5955 unknown command 2105889548
[  749.598811] binder: 5936:5955 ioctl c0306201 20000200 returned -22
01:32:56 executing program 5:

[  749.637352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  749.657572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:32:56 executing program 3:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101001, 0x0)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000000c0)={0x18c55c5e, 0x122, 0x7})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:56 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4)
connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c)

01:32:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x1a00, 0x4004400})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)}}, 0x20)
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0))
r1 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x1c)

[  749.747230] binder: 5980:5999 Acquire 1 refcount change on invalid ref 0 ret -22
[  749.754959] binder: 5980:5999 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3528)

01:32:56 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0xec, 0x200000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x24)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003c00fbff0000000000000000020000000000000000000400"], 0xffffffffffffffba}}, 0x8000)
accept4$unix(r1, 0x0, &(0x7f0000000080), 0x800)

01:32:56 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3900)

01:32:56 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5fd0)

01:32:56 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
fstat(r0, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0x321, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00c2bc292f55f379df0325e1c33d0000000000000000000000000000a15f175a046088dac7588c90a48d6eeb2a9900f8e8ec96310a313c9a01370b3993a6dd35bb24bfb722f711f4692bcd0ca33bc5782d6f01db5b8bd99a0494679ea2026bd47e0c51951e8c9896b21c59f8ad216518d09f484225b283d40dc9d851be066526bebe74564baa12ada4c7fb6ff76652ee7d7c0a9812e29f6a65f0cb1cfd643166460a488552b64436f7893221a708cac3268cfd0350df31e1dc"], 0x1c}}, 0x0)

01:32:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x10b0)

01:32:56 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c)

[  750.471234] binder: 5980:6045 Acquire 1 refcount change on invalid ref 0 ret -22
[  750.478860] binder: 5980:6045 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0xa28, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xc}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:56 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x6)
bind$inet6(r0, &(0x7f0000000080), 0x1c)

01:32:56 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x14)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
close(r0)

01:32:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
r1 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @local}, &(0x7f0000000400)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000540)={<r2=>0x0, @in6={{0xa, 0x4e23, 0x80000001, @empty, 0x400}}, 0x36, 0x7, 0x2, 0x4}, &(0x7f0000000440)=0x98)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={r2, @in6={{0xa, 0x4e24, 0xfffffffffffffff8, @mcast2, 0x8001}}, [0x0, 0x81, 0x3993, 0x7, 0x100000001, 0x2, 0xfffffffffffffff7, 0x6, 0x3, 0x1, 0x9, 0xfffffffffffffff8, 0x80, 0x8000, 0x53ece8bc]}, &(0x7f0000000480)=0x100)
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1021000, &(0x7f0000000100)={'trans=unix,', {[{@cache_none='cache=none'}, {@privport='privport'}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, 0x8)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000300)=0x6, 0xfffffffffffffc3e)
sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x32, 0x100, 0x70bd27, 0x25dfdbfc, {0x16}, [@typed={0x8, 0x14, @u32=0xbf}, @typed={0x8, 0x2a, @ipv4=@loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004)
socket$nl_generic(0x10, 0x3, 0x10)

01:32:57 executing program 5:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6660)

[  750.652357] binder: 6061:6075 Acquire 1 refcount change on invalid ref 0 ret -22
[  750.660017] binder: 6061:6075 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2b0000001d000500d49c00000000be1e080000000800430021000008583ee18847290c7592"], 0x1c}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000200)={'eql\x00', 0x101})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', r2})

01:32:57 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x11d0)

01:32:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x51a8)

01:32:57 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000e51fb2d565080064e3d8dec43d56df1bf7abb2a474eb2988cacc7b84412a94d8231e7e06fc6562633b9ef94116dbd1f4ae8a2b4fc63f0258fdd39832cc6ba78fc16d2c8352"], 0x0, 0x0, &(0x7f0000000180)})
getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000400)=""/253, &(0x7f00000002c0)=0xfd)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000040)=0x3f, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
clone(0x10000000, &(0x7f00000000c0)="e7a9a665cbf92851dd3f", &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000380)="435c1075e2e42478fb3e3c497ee90cf9cdd606ee5021d2aa96bf6177b3cdd657834463724e652f5c076f3fa182cf228562eb636cf621b265fa273c7047ddf2d3760c484ffc28dc238bcfc2")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:57 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x168)

01:32:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf250f0000000c000100080004004e2000000c000100080004004e23000008000400080000001400030008000100020000000800030000000000080006000600000008000600000000001400010008000200880000000800050001000000080006004500000008000500000000000800060084c50000"], 0x84}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

01:32:57 executing program 5:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6660)

01:32:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6d20)

01:32:57 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2e8)

[  751.407236] binder: 6061:6109 Acquire 1 refcount change on invalid ref 0 ret -22
[  751.414992] binder: 6061:6109 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00')
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000140)={0x0, 0x7fff})
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x8000, &(0x7f0000000100)=0x4)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:32:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x4000, 0x2)
r2 = getpgrp(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000100)={{0x8, 0x0, 0xbd, 0x8, '\x00', 0xdc}, 0x1, 0x0, 0x6, r2, 0x1, 0x6, 'syz1\x00', &(0x7f00000000c0)=['\x00'], 0x1, [], [0xa0d, 0x81, 0x5, 0x2]})
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x15, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  751.522736] binder: 6111:6133 unknown command 535101440
[  751.528520] binder: 6111:6133 ioctl c0306201 20000200 returned -22
[  751.536310] binder: 6111:6114 Acquire 1 refcount change on invalid ref 0 ret -22
[  751.559296] binder: 6111:6114 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8718)

01:32:58 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x804, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x1}}, 0x18)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:32:58 executing program 5:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6660)

[  751.603274] binder: 6111:6133 unknown command 535101440
[  751.608773] binder: 6111:6133 ioctl c0306201 20000200 returned -22
01:32:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x1d, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

01:32:58 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6090)

01:32:58 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3a50)

01:32:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x800, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000180)={@host})
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f00000000c0))

01:32:58 executing program 3:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '%,,'}, {0x20, '/dev/hwrng\x00'}], 0xa, "8846933c06a6e318c7164c1510ab393a052b1bd465cae7d94734654857e1122bd66be6b4ff25cfb3025a5efaa304f13f8fb717b736853106253832da621680cee6b3c519908753f87312ff4c8102d32cd7b02da368206a8e6a0f689c"}, 0x77)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000200400000000000000000001008e2c3a4a44a15"], 0x1c}}, 0x0)

01:32:58 executing program 5:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:32:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2130)

01:32:58 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x648)

[  751.900805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  751.931723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:32:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

01:32:58 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x27f0)

01:32:58 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={<r1=>0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x14, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x3}, @free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000000f4d)})

01:32:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
exit(0x2)
r1 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x7fffffff, 0x80)
r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)="637075616363742e75736167655f7065726370755f75736572000f6fa85f38d242081464c425f93c4ed6778578dce94c1991abe1a2f1e2f7c27b64c9c38c52d046acccbd45166c0879f4ebe166bb83ab55c2d6d4c984efc9b5a6ab07056cb07ad2c6d1f52874d1904ea6da9f7266d093259899d2a8b6c19a8f81dac06b021affd5e86959cf6238b87311bd105c451fde7098364e643f337860f39cada3ffbff6ad27076b90519e0b4bd2d211b50648d071e33191ec80eb59f77798fa347045b7e698dcd27e40d782db9c5754ec592a4a6f5db6119c5007bdbe4ee063390a3c", 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000082}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3d}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xf782621d117174fd}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x78}}, 0x20000040)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000003c0)=""/227)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)

01:32:58 executing program 5:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:32:58 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4cb0)

01:32:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1398)

01:32:58 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1f80)

[  752.508812] binder_thread_write: 2 callbacks suppressed
[  752.508826] binder: 6148:6203 Acquire 1 refcount change on invalid ref 0 ret -22
[  752.521855] binder_thread_write: 2 callbacks suppressed
[  752.521872] binder: 6148:6203 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:58 executing program 5:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

[  752.607513] binder: 6212:6216 Acquire 1 refcount change on invalid ref 0 ret -22
[  752.615263] binder: 6212:6216 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:59 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4890)

01:32:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2328)

01:32:59 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xf60)

01:32:59 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:32:59 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0)

01:32:59 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000080))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2dc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f00000000c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

[  753.381301] binder: 6212:6253 Acquire 1 refcount change on invalid ref 0 ret -22
[  753.388954] binder: 6212:6253 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
readahead(r0, 0xfffffffffffffff7, 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xa, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0005000000000000000000020000000800000200000000"], 0x1c}, 0x1, 0x0, 0x0, 0xffbffffffffffffe}, 0x50)

01:32:59 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5730)

01:32:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x47e8)

01:32:59 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xe58)

01:32:59 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0)

01:32:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
chown(&(0x7f0000000100)='./file0\x00', r1, r2)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r3=>0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f00000000c0)={0x20})

[  753.433767] binder: 6259:6260 unknown command 0
[  753.438603] binder: 6259:6260 ioctl c0306201 20000200 returned -22
[  753.451755] binder: 6259:6260 Acquire 1 refcount change on invalid ref 0 ret -22
[  753.459363] binder: 6259:6260 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:32:59 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4)

01:32:59 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0)

01:32:59 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x36a8)

01:32:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5970)

01:32:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x1, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:33:00 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x49)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0xff0e, 0x0, &(0x7f0000000040)})

01:33:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x501000)
r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x20000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, r2, 0xf, 0x2}, 0x10)

01:33:00 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1e18)

01:33:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000480)={0x11, 0x0, <r1=>0x0}, &(0x7f0000001540)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001580)={'lo\x00', r1})
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
accept4$llc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0)

01:33:00 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4d40)

01:33:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xca8)

[  754.224083] binder: 6259:6307 unknown command 0
[  754.228902] binder: 6259:6307 ioctl c0306201 20000200 returned -22
[  754.235634] binder: 6259:6278 Acquire 1 refcount change on invalid ref 0 ret -22
[  754.243352] binder: 6259:6278 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fdatasync(r0)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:33:00 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="c442f92a7000452439b963020000b86bc9479bba000000000f302e450f01c966400f388027400f00de66baf80cb89865bd8aef66bafc0c66ed430f1a32c4412311f664430f01df", 0x47}], 0xaaaab66, 0x0, &(0x7f0000000100), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f00000006c0)=""/186, 0xba}], 0x6, 0x0)
sendto(r0, &(0x7f0000000140)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000))

01:33:00 executing program 3:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @multicast2}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000200)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000380), &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000400))
r3 = getegid()
r4 = getgid()
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x1}, [{0x2, 0x0, r0}, {0x2, 0x1, r1}], {}, [{0x8, 0x7, r2}, {0x8, 0x4, r3}, {0x8, 0x2, r4}], {0x10, 0x1}, {0x20, 0x1}}, 0x4c, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  754.350369] binder: 6322:6323 Acquire 1 refcount change on invalid ref 0 ret -22
[  754.358079] binder: 6322:6323 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000007c0)={"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"})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00')
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000100))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0100001d00050000000000000000000cc3f7cd68f12d5de8ba7b8869228d26"], 0x1c}}, 0x0)

01:33:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xc00)

01:33:00 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2a60)

01:33:01 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
ftruncate(r0, 0xf3b)

01:33:01 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6978)

01:33:01 executing program 5 (fault-call:0 fault-nth:0):
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6e88)

01:33:01 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20140, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x5, 0x0, {0x1, 0x1, 0x4ae2a531, 0x2, 0x1000}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000027000)='./file0\x00', 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f00000000c0)=0x54)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000200)={0x100000000, 0x8})
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:33:01 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x21c0)

[  755.113440] binder: 6322:6359 Acquire 1 refcount change on invalid ref 0 ret -22
[  755.121117] binder: 6322:6359 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  755.156255] FAULT_INJECTION: forcing a failure.
[  755.156255] name failslab, interval 1, probability 0, space 0, times 0
[  755.178330] CPU: 0 PID: 6368 Comm: syz-executor5 Not tainted 4.19.0-rc7-next-20181011+ #92
[  755.186824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  755.196184] Call Trace:
[  755.198827]  dump_stack+0x244/0x3ab
[  755.202496]  ? dump_stack_print_info.cold.2+0x52/0x52
[  755.204445] binder: 6370:6373 Acquire 1 refcount change on invalid ref 0 ret -22
[  755.207706]  should_fail.cold.4+0xa/0x17
[  755.207727]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  755.215291] binder: 6370:6373 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  755.219315]  ? rcu_read_unlock_special+0x1c0/0x1c0
[  755.219338]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  755.241853]  ? pid_task+0x115/0x200
[  755.245497]  ? find_vpid+0xf0/0xf0
[  755.249239]  ? lock_downgrade+0x900/0x900
[  755.253439]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  755.258994]  ? proc_fail_nth_write+0x9e/0x210
[  755.263516]  ? fs_reclaim_acquire+0x20/0x20
[  755.267903]  ? lock_downgrade+0x900/0x900
[  755.272082]  ? perf_trace_sched_process_exec+0x860/0x860
[  755.277546]  ? wait_for_completion+0x8a0/0x8a0
[  755.282138]  ? lock_release+0xa10/0xa10
[  755.286123]  __should_failslab+0x124/0x180
[  755.290386]  should_failslab+0x9/0x14
[  755.294196]  kmem_cache_alloc+0x2be/0x730
[  755.298354]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
01:33:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x10000000000)
r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x0)
getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)=""/53)
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)

[  755.303900]  ? check_preemption_disabled+0x48/0x200
[  755.308926]  getname_flags+0xd0/0x590
[  755.312731]  getname+0x19/0x20
[  755.315928]  do_sys_open+0x383/0x700
[  755.319682]  ? filp_open+0x80/0x80
[  755.323247]  ? trace_hardirqs_off_caller+0x300/0x300
[  755.328376]  __x64_sys_open+0x7e/0xc0
[  755.332191]  do_syscall_64+0x1b9/0x820
[  755.336115]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  755.341503]  ? syscall_return_slowpath+0x5e0/0x5e0
[  755.346458]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  755.351287]  ? trace_hardirqs_on_caller+0x310/0x310
[  755.356286]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  755.361298]  ? prepare_exit_to_usermode+0x291/0x3b0
[  755.366298]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  755.371143]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  755.376368] RIP: 0033:0x411171
[  755.379601] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  755.398520] RSP: 002b:00007f1b965bf7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
01:33:01 executing program 5 (fault-call:0 fault-nth:1):
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x5, 0x7, 0x92)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000210000808000300c9003f03"], 0x1c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001540)=@newspdinfo={0x2310, 0x24, 0x100, 0x70bd2b, 0x25dfdbfd, 0x0, [@sec_ctx={0xb4, 0x8, {0xad, 0x8, 0x1, 0xfffffffffffffffb, 0xa5, "8a9dc2c9567836f1c2c7d4af67e67ea10e6f317fb9c20f3b3be6081ceadf62c12316df8941ec709381d042174ea74c464dbd04edf771b042f9b896cfffcc60c5e8e13cf79ef565d96f51ddafaf813db7e25aa79fcbb64f701b3cc4ceff51eeee242fdfe4288e255adee760e47c13b16a4170bb31c0ab8ea8331a26e8325cbc2fbb558353dabe002a2cf8be205cdc794273154dd98a4f01dcd5691f2343e83d8eb79bafc094"}}, @algo_comp={0x144, 0x3, {{'lzs\x00'}, 0x7e0, "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"}}, @ipv4_hthresh={0x8, 0x3, {0x16, 0x19}}, @algo_auth_trunc={0x104c, 0x14, {{'crct10dif-pclmul\x00'}, 0x8000, 0x0, "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"}}, @proto={0x8, 0x19, 0x3b}, @algo_aead={0x104c, 0x12, {{'aegis256-generic\x00'}, 0x8000, 0x60, "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"}}, @proto={0x8, 0x19, 0x6c}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@mcast2, 0x2, 0x5}}, @user_kmaddress={0x2c, 0x13, {@in, @in6=@mcast1, 0x0, 0x2}}]}, 0x2310}, 0x1, 0x0, 0x0, 0x240040d0}, 0x4)
write(r0, &(0x7f0000000540)="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", 0x1000)

[  755.406246] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411171
[  755.413508] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f1b965bf850
[  755.420780] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000
[  755.428049] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f1b965c06d4
[  755.435324] R13: 00000000004c4c1f R14: 00000000004d7fc8 R15: 0000000000000003
[  755.492058] FAULT_INJECTION: forcing a failure.
[  755.492058] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  755.503895] CPU: 1 PID: 6394 Comm: syz-executor5 Not tainted 4.19.0-rc7-next-20181011+ #92
[  755.512469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  755.521830] Call Trace:
[  755.524449]  dump_stack+0x244/0x3ab
[  755.528112]  ? dump_stack_print_info.cold.2+0x52/0x52
[  755.533327]  should_fail.cold.4+0xa/0x17
01:33:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0xffffffff, 0x80)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000380)={0x0, {{0xa, 0x4e22, 0x4, @loopback, 0xc7}}}, 0x88)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={<r3=>0x0, @rand_addr, @dev}, &(0x7f0000000140)=0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@remote, @remote, <r4=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r2, 0x202, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x55)

01:33:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x1e46e733)
socketpair$inet_sctp(0x2, 0x200100000000, 0x84, &(0x7f0000000340)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={<r3=>0x0, @in6={{0xa, 0x4e20, 0x3b080000000, @loopback, 0xffffffff}}, [0x6, 0x6, 0x985b, 0x6, 0x3ff, 0x1208, 0xff, 0x7, 0x80, 0x8, 0x9, 0x1a, 0x401]}, &(0x7f0000000200)=0x100)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r3, 0x8}, &(0x7f0000000280)=0x8)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  755.537401]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  755.543045]  ? debug_smp_processor_id+0x1c/0x20
[  755.547759]  ? perf_trace_lock_acquire+0x15b/0x800
[  755.552750]  ? lock_acquire+0x1ed/0x520
[  755.556744]  ? __fdget_pos+0x1bb/0x200
[  755.560651]  ? mark_held_locks+0x130/0x130
[  755.564914]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  755.570498]  ? _kstrtoull+0x188/0x250
[  755.574305]  ? _parse_integer+0x180/0x180
[  755.578478]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  755.584020]  ? check_preemption_disabled+0x48/0x200
[  755.589041]  ? debug_smp_processor_id+0x1c/0x20
[  755.593718]  ? perf_trace_lock_acquire+0x15b/0x800
[  755.598657]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  755.604216]  ? should_fail+0x22d/0xd01
[  755.608129]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  755.613260]  __alloc_pages_nodemask+0x34b/0xdd0
[  755.617962]  ? pid_task+0x115/0x200
[  755.621620]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[  755.626652]  ? lock_downgrade+0x900/0x900
[  755.630813]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  755.636357]  ? proc_fail_nth_write+0x9e/0x210
01:33:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x1}}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x3f, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000140))
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x9, 0x4)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000100)=0x1)

[  755.640862]  ? fs_reclaim_acquire+0x20/0x20
[  755.645217]  ? lock_downgrade+0x900/0x900
[  755.649379]  ? trace_hardirqs_off+0xb8/0x310
[  755.653795]  cache_grow_begin+0xa5/0x8c0
[  755.657882]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  755.663447]  ? check_preemption_disabled+0x48/0x200
[  755.668493]  kmem_cache_alloc+0x66b/0x730
[  755.672651]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  755.678206]  ? check_preemption_disabled+0x48/0x200
[  755.683227]  getname_flags+0xd0/0x590
[  755.687078]  getname+0x19/0x20
[  755.690282]  do_sys_open+0x383/0x700
[  755.694019]  ? filp_open+0x80/0x80
[  755.697563]  ? trace_hardirqs_off_caller+0x300/0x300
[  755.702670]  __x64_sys_open+0x7e/0xc0
[  755.706470]  do_syscall_64+0x1b9/0x820
[  755.710341]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  755.715706]  ? syscall_return_slowpath+0x5e0/0x5e0
[  755.720639]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  755.725481]  ? trace_hardirqs_on_caller+0x310/0x310
[  755.730496]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  755.735528]  ? prepare_exit_to_usermode+0x291/0x3b0
[  755.740532]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  755.745360]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  755.750532] RIP: 0033:0x411171
[  755.753710] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  755.772624] RSP: 002b:00007f1b965bf7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  755.780314] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411171
[  755.787573] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f1b965bf850
[  755.794836] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000
[  755.802088] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f1b965c06d4
[  755.809339] R13: 00000000004c4c1f R14: 00000000004d7fc8 R15: 0000000000000003
01:33:02 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x23, 0x1, @thr={&(0x7f0000000040)="e6a267ac17172af3a489cdb3856571f4b58e0dbd2041e13b", &(0x7f00000002c0)="13a58905bba2938dceea7f9b87d8023bae941dc88c597a29bbe158df28e6742df9b13d7b6b35fe387c3888509ad6d382976901c10e2d37ae09ff69f7a218ef2a7285f11a4841c4e44a4dd7f759d4a7321b2975d7743a81ab233dfa232b39ce282aea119942cd00237b07df461ce91ac21513af5b671eb64eb2059f42cf7c6e060b0831ad744e0b42f52bca"}}, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d000500000083cf3c1f47a3b020000062be05542b0e357e56f16c88d05603002100000067497b6fd9c2f9625c1eb10dfd3628902942be5e167bbee3e56fede39396a8435670ec3125b3a343ac1b0cc9ad10364922586e9e14bd8e8d6e46e22874019e11e52073e20406ecec152408065cbeeb051726863d3c197b38d8bf826982b46875c88e7dbb330907"], 0x1}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

01:33:02 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4b78)

01:33:02 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5e08)

01:33:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7e00)

01:33:02 executing program 5 (fault-call:0 fault-nth:2):
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

[  755.981610] binder: 6370:6419 Acquire 1 refcount change on invalid ref 0 ret -22
[  755.989244] binder: 6370:6419 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  756.030650] FAULT_INJECTION: forcing a failure.
[  756.030650] name failslab, interval 1, probability 0, space 0, times 0
[  756.075108] CPU: 0 PID: 6431 Comm: syz-executor5 Not tainted 4.19.0-rc7-next-20181011+ #92
[  756.083529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  756.092893] Call Trace:
[  756.095511]  dump_stack+0x244/0x3ab
[  756.099149]  ? dump_stack_print_info.cold.2+0x52/0x52
[  756.104375]  should_fail.cold.4+0xa/0x17
[  756.105891] binder: 6428:6440 Acquire 1 refcount change on invalid ref 0 ret -22
[  756.108470]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  756.108488]  ? perf_trace_lock+0x7a0/0x7a0
[  756.108507]  ? perf_trace_lock_acquire+0x15b/0x800
[  756.116084] binder: 6428:6440 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  756.121164]  ? debug_smp_processor_id+0x1c/0x20
[  756.141852]  ? perf_trace_lock_acquire+0x15b/0x800
[  756.146804]  ? perf_trace_lock+0x7a0/0x7a0
[  756.151057]  ? perf_trace_lock+0x7a0/0x7a0
[  756.155308]  ? mark_held_locks+0x130/0x130
[  756.159554]  ? mark_held_locks+0x130/0x130
[  756.163806]  ? refcount_inc_not_zero_checked+0x2f0/0x2f0
[  756.169265]  ? fs_reclaim_acquire+0x20/0x20
[  756.173607]  ? lock_downgrade+0x900/0x900
[  756.177776]  ? perf_trace_sched_process_exec+0x860/0x860
[  756.183270]  ? perf_trace_lock_acquire+0x15b/0x800
[  756.188204]  ? debug_smp_processor_id+0x1c/0x20
[  756.192896]  __should_failslab+0x124/0x180
[  756.197134]  should_failslab+0x9/0x14
[  756.200943]  kmem_cache_alloc+0x2be/0x730
[  756.205094]  ? mark_held_locks+0x130/0x130
[  756.209339]  ? perf_trace_lock_acquire+0x15b/0x800
[  756.214266]  __alloc_file+0xa8/0x470
[  756.217978]  ? file_free_rcu+0xd0/0xd0
[  756.221867]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  756.226887]  ? bpf_prog_kallsyms_find+0xde/0x4a0
[  756.231649]  ? is_bpf_text_address+0xac/0x170
[  756.236180]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  756.241730]  ? check_preemption_disabled+0x48/0x200
[  756.246763]  alloc_empty_file+0x72/0x170
[  756.250829]  path_openat+0x170/0x5150
[  756.254634]  ? perf_trace_lock+0x7a0/0x7a0
[  756.258876]  ? is_bpf_text_address+0xd3/0x170
[  756.263373]  ? kernel_text_address+0x79/0xf0
[  756.267783]  ? path_lookupat.isra.43+0xc00/0xc00
[  756.272593]  ? unwind_get_return_address+0x61/0xa0
[  756.277530]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  756.282566]  ? expand_files.part.8+0x571/0x9a0
[  756.287154]  ? iterate_fd+0x4b0/0x4b0
[  756.290962]  ? __alloc_fd+0x347/0x6e0
[  756.294769]  ? lock_downgrade+0x900/0x900
[  756.298920]  ? kasan_check_read+0x11/0x20
[  756.303069]  ? do_raw_spin_unlock+0xa7/0x2f0
[  756.307479]  ? do_raw_spin_trylock+0x270/0x270
[  756.312077]  ? __check_object_size+0xb1/0x782
[  756.316585]  ? _raw_spin_unlock+0x2c/0x50
[  756.320770]  ? __alloc_fd+0x347/0x6e0
[  756.324580]  do_filp_open+0x255/0x380
[  756.328385]  ? may_open_dev+0x100/0x100
[  756.332409]  ? get_unused_fd_flags+0x122/0x1a0
[  756.337055]  ? __alloc_fd+0x6e0/0x6e0
[  756.340886]  do_sys_open+0x568/0x700
[  756.344618]  ? filp_open+0x80/0x80
[  756.348226]  ? trace_hardirqs_off_caller+0x300/0x300
[  756.353330]  __x64_sys_open+0x7e/0xc0
[  756.357160]  do_syscall_64+0x1b9/0x820
[  756.361055]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  756.366411]  ? syscall_return_slowpath+0x5e0/0x5e0
[  756.371346]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  756.376199]  ? trace_hardirqs_on_caller+0x310/0x310
[  756.381301]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  756.386339]  ? prepare_exit_to_usermode+0x291/0x3b0
[  756.391362]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  756.396211]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  756.401396] RIP: 0033:0x411171
[  756.404622] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
01:33:02 executing program 3:
nanosleep(&(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100))
openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x40, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

[  756.423868] RSP: 002b:00007f1b965bf7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  756.431591] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411171
[  756.438873] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f1b965bf850
[  756.446151] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000
[  756.453461] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f1b965c06d4
[  756.460729] R13: 00000000004c4c1f R14: 00000000004d7fc8 R15: 0000000000000003
01:33:02 executing program 5 (fault-call:0 fault-nth:3):
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

[  756.527235] FAULT_INJECTION: forcing a failure.
[  756.527235] name failslab, interval 1, probability 0, space 0, times 0
[  756.539001] CPU: 1 PID: 6450 Comm: syz-executor5 Not tainted 4.19.0-rc7-next-20181011+ #92
[  756.547404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  756.556762] Call Trace:
[  756.559367]  dump_stack+0x244/0x3ab
[  756.563013]  ? dump_stack_print_info.cold.2+0x52/0x52
[  756.568238]  should_fail.cold.4+0xa/0x17
[  756.572310]  ? fault_create_debugfs_attr+0x1f0/0x1f0
01:33:02 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x408)

01:33:02 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4b18)

[  756.577448]  ? is_bpf_text_address+0xd3/0x170
[  756.581981]  ? kernel_text_address+0x79/0xf0
[  756.586400]  ? __kernel_text_address+0xd/0x40
[  756.586416]  ? unwind_get_return_address+0x61/0xa0
[  756.586463]  ? fs_reclaim_acquire+0x20/0x20
[  756.586485]  ? lock_downgrade+0x900/0x900
[  756.595908]  ? perf_trace_sched_process_exec+0x860/0x860
[  756.595938]  __should_failslab+0x124/0x180
[  756.595955]  should_failslab+0x9/0x14
[  756.617954]  kmem_cache_alloc_trace+0x2d7/0x750
[  756.622650]  ? __might_sleep+0x95/0x190
[  756.626644]  apparmor_file_alloc_security+0x17b/0xac0
[  756.626664]  ? apparmor_path_rename+0xcd0/0xcd0
[  756.626678]  ? kasan_kmalloc+0xc7/0xe0
[  756.626694]  ? kasan_slab_alloc+0x12/0x20
[  756.626708]  ? kmem_cache_alloc+0x306/0x730
[  756.626724]  security_file_alloc+0x4c/0xa0
[  756.640479]  __alloc_file+0x12a/0x470
[  756.640494]  ? file_free_rcu+0xd0/0xd0
[  756.640511]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  756.640532]  ? bpf_prog_kallsyms_find+0xde/0x4a0
[  756.670630]  ? is_bpf_text_address+0xac/0x170
[  756.675135]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  756.680683]  ? check_preemption_disabled+0x48/0x200
[  756.685710]  alloc_empty_file+0x72/0x170
[  756.689775]  path_openat+0x170/0x5150
[  756.693584]  ? perf_trace_lock+0x7a0/0x7a0
[  756.697833]  ? is_bpf_text_address+0xd3/0x170
[  756.702348]  ? kernel_text_address+0x79/0xf0
[  756.706784]  ? path_lookupat.isra.43+0xc00/0xc00
[  756.711554]  ? unwind_get_return_address+0x61/0xa0
[  756.716520]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  756.721542]  ? expand_files.part.8+0x571/0x9a0
[  756.726115]  ? iterate_fd+0x4b0/0x4b0
[  756.729915]  ? __alloc_fd+0x347/0x6e0
[  756.733744]  ? lock_downgrade+0x900/0x900
[  756.737891]  ? kasan_check_read+0x11/0x20
[  756.742022]  ? do_raw_spin_unlock+0xa7/0x2f0
[  756.746454]  ? do_raw_spin_trylock+0x270/0x270
[  756.751042]  ? __check_object_size+0xb1/0x782
[  756.755551]  ? _raw_spin_unlock+0x2c/0x50
[  756.759716]  ? __alloc_fd+0x347/0x6e0
[  756.763560]  do_filp_open+0x255/0x380
[  756.767381]  ? may_open_dev+0x100/0x100
[  756.771440]  ? get_unused_fd_flags+0x122/0x1a0
[  756.776029]  ? __alloc_fd+0x6e0/0x6e0
[  756.779848]  do_sys_open+0x568/0x700
[  756.783583]  ? filp_open+0x80/0x80
[  756.787120]  ? trace_hardirqs_on+0x310/0x310
[  756.791538]  ? trace_hardirqs_off_caller+0x300/0x300
[  756.796640]  __x64_sys_open+0x7e/0xc0
[  756.800502]  do_syscall_64+0x1b9/0x820
[  756.804382]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  756.809765]  ? syscall_return_slowpath+0x5e0/0x5e0
[  756.814675]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  756.819528]  ? trace_hardirqs_on_caller+0x310/0x310
[  756.824546]  ? prepare_exit_to_usermode+0x291/0x3b0
[  756.829586]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  756.834412]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  756.839634] RIP: 0033:0x411171
[  756.842826] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  756.861736] RSP: 002b:00007f1b965bf7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  756.869436] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411171
01:33:03 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
r0 = socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="bb0c43eedb602d444fdfc3467b95644e9bcadb109d77913eae6361b6c42071698751e2d383de11251d3edb8eb676dcd0dabffe91933786b0aca4b4a6759136efdac615329af6a5f06eeca9abadd16df5947b5a2fd2acff45cb2d8d15d03568f1dffd3b57839b679cf447bb88387dbfa57109ec200b251647b9f3cbf512b542488e3cd39017266619a30eaec7cf99ac388e836537fb9ce759c94f5425b569a486ca0294b99556c2914a9557417553829c5f40b7b5bbe2103bf866c4b1f76e13e69b4d166601bb73c4c597f42840cf8ce46688108f6e3482f9972937"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000040)=0x5, 0x4)

01:33:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1da0)

01:33:03 executing program 5 (fault-call:0 fault-nth:4):
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

[  756.876720] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f1b965bf850
[  756.883989] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000
[  756.891257] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f1b965c06d4
[  756.898541] R13: 00000000004c4c1f R14: 00000000004d7fc8 R15: 0000000000000003
01:33:03 executing program 3:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xffffffff, 0x40040)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000003c0)=""/32)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400)=0x7523abe5, 0x4)
writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="21aba959585c5c5d1b61f69177f9b9fa768fc2628dce98a67be865398151", 0x1e}, {&(0x7f0000000200)="1b8001de6fac8e9e25653eb4676009f46155bf96109efabf2034e9f490ac351459f4bf9a730e8292b82bb58da2a0fe31ca3897769b1b624fc23c77757eb67d1126f88c16ece6c402338427a21fb2a73371f2cdd54ec758627336f3b844884ef9a5ec1bb6b33074c67bb0113b4414f0bd4c17df77a55561f2c040c9e0a7d7c8a0be56a7224a91a8c6e3d8be3927e775f6", 0x90}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)=<r3=>0x0)
ptrace$setopts(0x4200, r3, 0x4, 0x2)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400), 0x0)
r4 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x101000)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000300)=0x400)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x1b}, 0x8000}, @in6={0xa, 0x4e20, 0xa194, @dev={0xfe, 0x80, [], 0x18}, 0xfff}], 0x38)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e24, @multicast2}})
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d0000000000000000020000000800030029000000704ec33e7c83e1bac65ec361da3b522ee939d11e80c1b1e822a6d49305ea6102c6458ef8d35fcb2e"], 0x1c}}, 0x0)
socket$inet6(0xa, 0x0, 0x7bf6)

[  756.996716] FAULT_INJECTION: forcing a failure.
[  756.996716] name failslab, interval 1, probability 0, space 0, times 0
[  757.017485] CPU: 0 PID: 6469 Comm: syz-executor5 Not tainted 4.19.0-rc7-next-20181011+ #92
[  757.025907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  757.035266] Call Trace:
[  757.037439] binder: 6465:6468 unknown command -297595717
[  757.037874]  dump_stack+0x244/0x3ab
[  757.043363] binder: 6465:6468 ioctl c0306201 20000200 returned -22
[  757.046956]  ? dump_stack_print_info.cold.2+0x52/0x52
[  757.046979]  should_fail.cold.4+0xa/0x17
[  757.046997]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  757.067605]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  757.073128]  ? __follow_mount_rcu.isra.33.part.34+0x175/0x890
[  757.079002]  ? check_preemption_disabled+0x48/0x200
[  757.084012]  ? debug_smp_processor_id+0x1c/0x20
[  757.088688]  ? perf_trace_lock_acquire+0x15b/0x800
[  757.093616]  ? fs_reclaim_acquire+0x20/0x20
[  757.097984]  ? lock_downgrade+0x900/0x900
[  757.102127]  ? perf_trace_sched_process_exec+0x860/0x860
[  757.107585]  __should_failslab+0x124/0x180
[  757.111818]  should_failslab+0x9/0x14
[  757.115618]  __kmalloc+0x2e0/0x760
[  757.119145]  ? m_show+0x5d0/0x5d0
[  757.122582]  ? chrdev_open+0xde/0x710
[  757.126383]  ? lock_downgrade+0x900/0x900
[  757.130568]  ? evdev_open+0x14e/0x610
[  757.134367]  evdev_open+0x14e/0x610
[  757.137980]  ? kasan_check_read+0x11/0x20
[  757.142125]  ? do_raw_spin_unlock+0xa7/0x2f0
[  757.146549]  ? evdev_event+0x190/0x190
[  757.150493]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  757.156016]  ? refcount_inc_checked+0x29/0x70
[  757.160525]  ? evdev_event+0x190/0x190
[  757.164413]  chrdev_open+0x25a/0x710
[  757.168144]  ? apparmor_capable+0x6c0/0x6c0
[  757.172467]  ? cdev_put.part.0+0x50/0x50
[  757.176517]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  757.182040]  ? errseq_sample+0xe5/0x130
[  757.185999]  ? _copy_to_user+0x110/0x110
[  757.190090]  do_dentry_open+0x499/0x1250
[  757.194182]  ? cdev_put.part.0+0x50/0x50
[  757.198229]  ? chown_common+0x730/0x730
[  757.202221]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  757.207775]  ? security_inode_permission+0xd2/0x100
[  757.212779]  ? inode_permission+0xb2/0x560
[  757.217003]  vfs_open+0xa0/0xd0
[  757.220280]  path_openat+0x12bc/0x5150
[  757.224175]  ? path_lookupat.isra.43+0xc00/0xc00
[  757.228927]  ? unwind_get_return_address+0x61/0xa0
[  757.233866]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  757.238874]  ? expand_files.part.8+0x571/0x9a0
[  757.243459]  ? iterate_fd+0x4b0/0x4b0
[  757.247252]  ? __alloc_fd+0x347/0x6e0
[  757.251039]  ? lock_downgrade+0x900/0x900
[  757.255191]  ? kasan_check_read+0x11/0x20
[  757.259343]  ? do_raw_spin_unlock+0xa7/0x2f0
[  757.263781]  ? do_raw_spin_trylock+0x270/0x270
[  757.268375]  ? __check_object_size+0xb1/0x782
[  757.272876]  ? _raw_spin_unlock+0x2c/0x50
[  757.277009]  ? __alloc_fd+0x347/0x6e0
[  757.280799]  do_filp_open+0x255/0x380
[  757.284585]  ? may_open_dev+0x100/0x100
[  757.288553]  ? get_unused_fd_flags+0x122/0x1a0
[  757.293123]  ? __alloc_fd+0x6e0/0x6e0
[  757.296912]  do_sys_open+0x568/0x700
[  757.300616]  ? filp_open+0x80/0x80
[  757.304147]  ? trace_hardirqs_off_caller+0x300/0x300
[  757.309239]  __x64_sys_open+0x7e/0xc0
[  757.313038]  do_syscall_64+0x1b9/0x820
[  757.316921]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  757.322271]  ? syscall_return_slowpath+0x5e0/0x5e0
[  757.327199]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  757.332038]  ? trace_hardirqs_on_caller+0x310/0x310
[  757.337059]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  757.342066]  ? prepare_exit_to_usermode+0x291/0x3b0
[  757.347098]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  757.351943]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  757.357124] RIP: 0033:0x411171
[  757.360304] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  757.379189] RSP: 002b:00007f1b965bf7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  757.386899] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000411171
01:33:03 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8a60)

[  757.394173] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f1b965bf850
[  757.401443] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000
[  757.408713] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f1b965c06d4
[  757.415978] R13: 00000000004c4c1f R14: 00000000004d7fc8 R15: 0000000000000003
01:33:03 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2838)

01:33:03 executing program 5 (fault-call:0 fault-nth:5):
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3e40)

01:33:03 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x780)

01:33:03 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4c37d08c90366ba4300b022eec74424009cf9fb9cc744240206000000c7442406000000000f011c24640f01c9b8010000000f01c1e7e7c4c178288102000000c7442400c3000000c744240200000000c7442406000000000f011424c4c1381220c4c16d668f0f9f0000", 0x6a}], 0x1, 0x0, &(0x7f0000000080), 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"])
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x480, 0x11e57ed0]})
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:33:04 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xc00)

01:33:04 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xffffff1b, 0x0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff55, 0x0, &(0x7f00000002c0)="6860744599210792f8333a77820cf634e7b8fc55450c64d492b4899113413754ee7c937f554ad80f0a749d4c167fb2e351f53afbcabbd0fdc8e7eddb0ac5a0a3049ab3928f99d0883bbee2309a2797f9dd2c66f78305e45608b73f470331cf615f02a602a17c10f4abcea846cf0854a1f2ddf5c681afc3821e66a720f20001cd36cede122c2168dad9de5543ab8c7866bfba4c08de1155ee247c5f2e2edd12fab04e926b1d9a3f264469456458a03417fc71621a80d8ef0abcb2ab2ea52519bf7ebe4a3f6ee86dddf853f065d9455b01d4841a6aeb1b21ef"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440000000000e630c4000200000"], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
socket$inet6(0xa, 0x8000b, 0xce9)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x42)

01:33:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/.ev/input/event#\x00', 0x0, 0x2)

01:33:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x2000})
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0)
inotify_init()
recvmmsg(r0, &(0x7f0000007780)=[{{&(0x7f0000000100)=@ax25, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/179, 0xb3}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f0000001540)=""/114, 0x72}], 0x7, &(0x7f0000001640)=""/229, 0xe5, 0x5}, 0x9}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001740)=""/16, 0x10}, {&(0x7f0000001780)=""/48, 0x30}, {&(0x7f00000017c0)=""/240, 0xf0}, {&(0x7f00000018c0)=""/192, 0xc0}], 0x4, &(0x7f00000019c0), 0x0, 0x1f}}, {{&(0x7f0000001a00)=@can, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/126, 0x7e}, {&(0x7f0000001b00)=""/127, 0x7f}, {&(0x7f0000001b80)=""/183, 0xb7}, {&(0x7f0000001c40)=""/79, 0x4f}, {&(0x7f0000001cc0)=""/45, 0x2d}, {&(0x7f0000001d00)=""/174, 0xae}, {&(0x7f0000001dc0)=""/205, 0xcd}], 0x7, &(0x7f0000001f40)=""/25, 0x19, 0x4}, 0x3}, {{&(0x7f0000001f80)=@rc, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)=""/74, 0x4a}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/176, 0xb0}], 0x3, 0x0, 0x0, 0x6}, 0x1000}, {{&(0x7f0000002240)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000022c0)=""/123, 0x7b}, {&(0x7f0000002340)=""/173, 0xad}, {&(0x7f0000002400)=""/48, 0x30}, {&(0x7f0000002440)=""/49, 0x31}, {&(0x7f0000002480)=""/88, 0x58}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/48, 0x30}, {&(0x7f0000003540)=""/113, 0x71}, {&(0x7f00000035c0)=""/219, 0xdb}], 0x9, &(0x7f0000003780)=""/40, 0x28, 0x2}, 0x4}, {{&(0x7f00000037c0)=@rc, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003840)=""/242, 0xf2}, {&(0x7f0000003940)=""/189, 0xbd}, {&(0x7f0000003a00)=""/125, 0x7d}, {&(0x7f0000003a80)=""/194, 0xc2}, {&(0x7f0000003b80)}, {&(0x7f0000003bc0)=""/174, 0xae}, {&(0x7f0000003c80)=""/222, 0xde}, {&(0x7f0000003d80)=""/188, 0xbc}, {&(0x7f0000003e40)=""/106, 0x6a}], 0x9, &(0x7f0000003f80)=""/177, 0xb1, 0x7}, 0x9}, {{&(0x7f0000004040)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004300)=[{&(0x7f00000040c0)=""/114, 0x72}, {&(0x7f0000004140)=""/189, 0xbd}, {&(0x7f0000004200)=""/126, 0x7e}, {&(0x7f0000004280)=""/114, 0x72}], 0x4, &(0x7f0000004340)=""/89, 0x59, 0x8}, 0x5}, {{&(0x7f00000043c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000007600)=[{&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/70, 0x46}, {&(0x7f00000064c0)=""/65, 0x41}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/67, 0x43}, {&(0x7f00000075c0)=""/54, 0x36}], 0x7, &(0x7f0000007680)=""/243, 0xf3, 0x7ff}, 0xffffffff}], 0x8, 0x40000001, &(0x7f0000007980)={0x0, 0x1c9c380})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000079c0)={<r2=>0x0, 0x3c, "ea08f66c4ba6059c8e5a5b8c5e74403022ae86ff29c2cddf961fd987cf417498cae59d41753630b2fb16b1ff7b150b6842308c6933416112b091b6de"}, &(0x7f0000007a40)=0x44)
sendmsg(r1, &(0x7f0000007f40)={&(0x7f0000007ac0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x0, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000019c0)='^\r', 0x2}, {&(0x7f0000007b40)="c9244a68df46c29e8ed9936df516659b964a08f15107efb794ebda0355bf13df1b8ea6d269548f9d3c8474933aba112dbb6e029e484e21b3acb00c6837b546ae13559b532cce6e5164ac7a88", 0x4c}, {&(0x7f0000007bc0)="ad4668b8c6c7ea0018a004e327cf6988985249cb04f3172748e93d908932946b2477e7cdd9123af31c48fed887a8a730f9bb64f1bba7573d8203002187ed42618cbbaac70792ffeee2868d26a0f964bd1cb44d32929715c706f816e672e87b06eb8ec9529d51e1e7facf00b73c0e9701867b206eb047bc29de66f51c3d67fa484c0092dc09268afee6bd3280f50e96a9c41a7c7d9ef535203839ecdee0cb145c8cc3ace2", 0xa4}, {&(0x7f0000007c80)="061fbbee32aa71ae9c34a77824958358755e788274ad886c4ee734ab29c59f03f43e57bf0e869e0793bd24e1111d3282bcd228de3fb604c8df3c6389b85c21907888bd948addf7dc9b0353ee2bda9fc515dd769fa30c568964ca81f24bcf106e0dd995cc012c99c8836af28950f8354c57b67dfd8cd477427e9e5521e1491beb89f95a9b969a16e83ec8dac130cc7dedb5f67fa58cf326b035ae4981aa4c03e829facc17aa65ec84796d0eec9ec35c54bca9432988fb60524f8a358bc1775db30790dcc05c1b70cd34844a834dc96f78779e4c0f3ca14404034c2c81bcfd0aa2498753a6253febeef9720ece7272290011cd2832ca4b", 0xf6}], 0x4, &(0x7f0000007d80)=[{0x38, 0x1ff, 0x0, "bf933085d5946b36b7ed4601d8b7369334c4a1808f849be23f5686b3d92544de1a3405da"}, {0x58, 0x10f, 0x0, "d90912ad80a19012fa0decbf0e28c6f8ff497f0073015d01da5d4ec9a88f48cb2e5f883dac8ee51978fdb19957d62eeecb5a2b16d30d9cb22839f742fe631ab5fa"}, {0x18, 0x1, 0x9, "e1"}, {0x98, 0x111, 0x100000000, "c67dcf2ed1542715fa36dd5f781b9fa061a68b0ec3a96c5e4903e4d5d61a71398da646a01b379132bfd6c7b265ae5d6c5dae27515865e8eaa1d3008fb58e85fbf1cd6c4a8eafdbf1ac6b185c60036395c09d2596e54974febeb01d3c635447254c87742e13824d7bb51dd6d5047217e3985b4ed2c4b098c88c6c2dddc68f7cad2eb133b73d9c1743"}, {0x58, 0x11b, 0x10000, "8853d8a4447b81ca5ef57ab71fa751cf00dab721e841be03c1c691fbf28966ac9965debf77fe48cdb8db7df0dad9001c9bec72da9d18760793bc4b3385cefd65dd37c0efc3e2e0"}], 0x198, 0x40}, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000008040)={r2, 0x1f}, &(0x7f0000008080)=0x1b2)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000007a80)={r2, 0x4, 0x1f, 0x1}, 0x10)

01:33:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x20d0)

01:33:04 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x80b8)

01:33:04 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x35d0)

[  757.784462] binder: 6465:6514 unknown command -297595717
[  757.789981] binder: 6465:6514 ioctl c0306201 20000200 returned -22
[  757.796534] binder_thread_write: 2 callbacks suppressed
[  757.796564] binder: 6465:6476 Acquire 1 refcount change on invalid ref 0 ret -22
[  757.814754] binder_thread_write: 2 callbacks suppressed
[  757.814765] binder: 6465:6476 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='//ev/input/event#\x00', 0x0, 0x2)

[  757.904187] binder: 6524:6529 Acquire 1 refcount change on invalid ref 0 ret -22
[  757.911907] binder: 6524:6529 BC_REQUEST_DEATH_NOTIFICATION invalid ref 8192
01:33:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0x1af, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b00500000000000000000002ffff0000210000000000000000000000e9f85b47cd353fcb93b00d382ca57d69061fd111eb327eab6a10316ece9d4c9bfff30321cbd0d61d13cbf5b464626f38a6e8a6e4ac39f70d83e9f44c97d438698d61d591b2ad4937fd6204d9c42dc64d0a26d8cd"], 0x1c}}, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='veth1_to_bridge\x00')

01:33:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/d.v/input/event#\x00', 0x0, 0x2)

[  757.971148] binder: 6524:6548 Acquire 1 refcount change on invalid ref 0 ret -22
[  757.979089] binder: 6524:6548 BC_REQUEST_DEATH_NOTIFICATION invalid ref 8192
01:33:04 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4968)

01:33:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4cc8)

01:33:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), 0x8)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001d0005000000000000000000020000090000030021000000655889dc733421b75676ce3d38f696470bf6accc15958ffffb31bc233b25ab967acab952c4fdf8939f3285b1860ce938044d11abc9bab58f3847d5b01ec3cac00db5f1b6425c1c9053bc7db53cb6ffe85529defb26ba365c898be8dba9cd140079ee1a00a074ecc12af303fc7c07a6ec07ed951eac54f04ab70e2bc96b1978e1f7f5964317da27cab2785811015fe57e2f062925692c38cb20f781fdcb37c18dd3c8a853ab1b39d70fad0275890529f5b70f71362fc165b25d074d357c39d2c5a5d1360b9b96fffa89545ff85e46ae15bcda032192e6a2cafb00b1ceebb12285dc5f1c98bf68a68654dbab74f9e6592acba9b7d27c22b5851919fb2e153d3d90a9d4cbb71fbda86b9e8bf5cfd0773570ef7c05e1bb975263c6041b42a09b94ccdaff88703903d3e0e44db4f4d13d61cd5330f5051c4a38d839cf61d40276e0fb77aefc556691ab3e30cca7ed03b9103cd24ea3afe6aa4adbd792a34264ab4851834b3dcc143fff9b13eda8c8eaa38bc655a6ee33127d09084c8c4e1187a03d514473d8357b0c01e54973139aa31a7fb08834ea4b2b1082fd37f688fb"], 0x1c}}, 0x0)

01:33:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/d/v/input/event#\x00', 0x0, 0x2)

01:33:04 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3b10)

01:33:04 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

[  758.142605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  758.181224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:33:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev//nput/event#\x00', 0x0, 0x2)

01:33:04 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2fe8)

01:33:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d942ea70efe89585e0005000000000000000000020000000800030021000000"], 0x1c}}, 0x0)

[  758.225603] binder: 6570:6579 Acquire 1 refcount change on invalid ref 0 ret -22
[  758.233226] binder: 6570:6579 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/.nput/event#\x00', 0x0, 0x2)

01:33:04 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xd98)

01:33:04 executing program 3:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x8)
fdatasync(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000200000008000300210000003729d95e22f507a99efbecc19c0cebe44c971bd0de08f02329fb1c8cc28971572af9be40ee9bbe8d3be15eba230762bf11267f17098ad565e13e5818f54e5a4000c2f232d551fa9eb6ca100794652178993edbc60d01ec55b673bd91f15a4aaf2186ab8b1927577a1f458a941b46"], 0x1c}}, 0x0)
r2 = dup2(r1, r1)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={<r3=>0x0, 0x48d7, 0x30, 0xcc, 0x3ff}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)={r3, 0x5, 0x1000, "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"}, 0x1008)

01:33:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x840)

01:33:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input//vent#\x00', 0x0, 0x2)

01:33:04 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2538)

01:33:04 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
write$P9_RVERSION(r0, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)

01:33:04 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/.vent#\x00', 0x0, 0x2)

01:33:05 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f262"], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xfff, 0x200000)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000000000, 0x20000)
r2 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x80, 0x800)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x8, 0x4c6c, 0x3, 0x7})
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000340)=""/250)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000240)=""/237, &(0x7f0000000040)=0xed)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000100)={0x1ff, 0x1, 0x7, 0x7}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x10002000})

01:33:05 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/ev.nt#\x00', 0x0, 0x2)

01:33:05 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2e98)

01:33:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4b00)

01:33:05 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5e50)

[  758.972779] binder: 6570:6627 Acquire 1 refcount change on invalid ref 0 ret -22
[  758.980397] binder: 6570:6627 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:05 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/ev/nt#\x00', 0x0, 0x2)

01:33:05 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c)
r4 = eventfd(0x101)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x40100, 0x0)
r6 = fanotify_init(0x4, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={<r9=>0x0, 0x8dc}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r9, @in={{0x2, 0x4e23, @rand_addr=0x1}}, 0x8, 0xfff, 0x81, 0x6}, &(0x7f00000001c0)=0x98)
ioctl$KVM_ENABLE_CAP(r8, 0x4068aea3, &(0x7f0000000380)={0x9f})
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000240)=0x9ce9)
r10 = eventfd(0x8)
r11 = inotify_init1(0x80000)
poll(&(0x7f0000000400)=[{r0, 0x200}, {r1}, {r2, 0xed9eb14a5b6c1f2b}, {r3, 0x4}, {r4, 0x400}, {r5, 0x4000}, {r6, 0x4}, {r10, 0x200}, {r11, 0x41}], 0x9, 0x9)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000001d0005000000000000000000020000000800030021000000cba886c39833add4b822ada8150e7818ff4e34a8af5ee2b99fe0ad79df907c6a119c2ffe186365b249836148d2a23ac1fb55099b77abb0adb647"], 0x1c}}, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x7, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/251, 0x1fe, 0xfb}, 0x20)

[  759.085861] binder: 6641:6643 unknown command 25330
[  759.090959] binder: 6641:6643 ioctl c0306201 20000200 returned -22
[  759.098468] binder: 6641:6643 Acquire 1 refcount change on invalid ref 0 ret -22
[  759.106891] binder: 6641:6643 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:05 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4)

01:33:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xffffffffffffff4a, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x100000000001d, 0x5, 0x0, 0x0, {0x2}, [@typed={0x8, 0x96, @u32=0x5c57}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)

01:33:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7b48)

01:33:06 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x802, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000814}, 0x20004000)
r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b63"], 0x0, 0x0, &(0x7f0000000180)})
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e22, 0x4075, @local, 0x1}, {0xa, 0x4e23, 0x9, @local, 0x3}, 0x8000, [0x1000, 0x400, 0x1ff, 0x2, 0xa653, 0x4, 0xb9, 0x3]}, 0x5c)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:06 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7f50)

01:33:06 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)="637075260b09360a00ff00dc2edfbb6bad1bf3f65f7c53933e9415236291ecf212bbd0cd30a4daa8e16f2abd7d4556ba36aeee2834e48d1708a7b03447c238fb1994df114a450298506d0f2898ff055bd9ad7ca3c9597ef4f7f9469cf08348b512de4d80321fa68a891c")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000000000000000020000000801050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1)

01:33:06 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3c00)

01:33:06 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1b18)

[  759.841608] binder: 6641:6677 unknown command 25330
[  759.846699] binder: 6641:6677 ioctl c0306201 20000200 returned -22
[  759.853094] binder: 6641:6677 Acquire 1 refcount change on invalid ref 0 ret -22
[  759.860700] binder: 6641:6677 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:06 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x558)

01:33:06 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000300)=r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="61b6c2c92a01d722ade1d0e0b742f14cd12a2bbe842c491402ae46b99ed72f668add8bcaaf70db192b005674b7aaa2688fa366054ad928480a5cfa1f8e2ca9ff122f980f905b9b70a5522605a502667999459175800fc19b2af9e22cd46e6495e70bfcc298dbd6fcbf1cdf7d0a85a2a87e16d07a521ce01122fff3120c666383784707b9cd0804c2a0c557592d95463711302a948b0539d55d8618496191ad43b9eee3e2f16c8ef2cee9133c0d5507844260d5815ab43fa72ae4", 0xba, 0x1}, {&(0x7f00000001c0)="12e286eb7d", 0x5, 0x4}], 0x100000, &(0x7f0000000240)='md5sum/wlan1cgroup\x00')

01:33:06 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1278)

01:33:06 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)="2f6465762f696e7075742f6576656e7423ff", 0x0, 0x2)

[  760.047198] binder: 6688:6701 unknown command 25371
[  760.052381] binder: 6688:6701 ioctl c0306201 20000200 returned -22
[  760.061832] binder: 6688:6690 Acquire 1 refcount change on invalid ref 0 ret -22
[  760.069618] binder: 6688:6690 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7128)

[  760.135223] binder: 6688:6690 unknown command 25371
[  760.140296] binder: 6688:6690 ioctl c0306201 20000200 returned -22
[  760.146772] binder: 6688:6701 Acquire 1 refcount change on invalid ref 0 ret -22
[  760.155271] binder: 6688:6701 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:06 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r0=>0x0, <r1=>0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', <r2=>0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0xd, &(0x7f0000000040)='/dev/binder#\x00', r2}, 0x30)

01:33:06 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:06 executing program 3:
r0 = socket$pptp(0x18, 0x1, 0x2)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000300)=0x401, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000340)={0x2, 0x0, 0x100, 0x1f, 0xffffffff, 0x1000})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}, 0x4}, r3}}, 0x38)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x1000, "ff00", 0x7445})
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0xfc, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@generic="104594c243f8cf537a9b559b9bcfae6ffd11c8567de2bdaf77310b21e4994a4efe161f1bdb3ed3e486f84a4fdedc7404f8a381a5a858319ffe3618d0a69a414c179e4f2c239681e91812ff7bc634afd0fa6f07a2f24f34c534f7741426b3cc05f38621e1991da7f9feb95b4462c1ae759e21999876e3e97f75e99ca8ed90bec4930059558ea8b3ee2d561f0ec1992c1b1435383d97b65d7eecad03c40de718a4556410e21cfccb14d4cc595b3ea3a02ca736931fccbf5b4c5c9afd8ec08bb26a7fc6fcb518cfe25bd539499d822d393add0340da8bfada9b14ca03609eac545065cfcbba69"]}, 0xfc}}, 0x10)

01:33:06 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x46b0)

01:33:06 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2568)

[  760.353244] netlink: 232 bytes leftover after parsing attributes in process `syz-executor3'.
[  760.370360] binder: 6724:6737 Acquire 1 refcount change on invalid ref 0 ret -22
[  760.378232] binder: 6724:6737 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  760.396298] netlink: 232 bytes leftover after parsing attributes in process `syz-executor3'.
01:33:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xb88)

01:33:06 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)="2f6465762f696e7075742f6576656e742304", 0x0, 0x2)

01:33:06 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x4}, 0x4)

01:33:06 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x29e8)

01:33:06 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6780)

01:33:06 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000001c0))
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), 0xfffffffffffffff0)
sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="a2e3cb845ccd686a8e5f91ece25a54e113908f69f1c37277b14b4d24bfa7c85b94a8ad8456b859af7168c64f6ab13636b9a0da05ae2b476963fae287a7b87b0ec11f51d5595c85125596f24a64cced9361cc23169c71d529fada39e81950f6b97753ace0747d78ab4de59d191fee18f81d67ae6dc8c3d234"]], 0x1}}, 0x0)

01:33:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5eb0)

01:33:07 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:07 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5610)

01:33:07 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f00000000c0))
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:07 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xe88)

01:33:07 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:07 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x6228)

01:33:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x62d0)

01:33:07 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2448)

01:33:07 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00050000000000000000000200000008000300210000001370b8787ba31d06e061b53c4215cc02a0f4c70f81823407d1d4d49b3dbfff99aca022e5130f3a70bc7e2100783bdf740740458c84ac38187c672335ac5fe90b0b3912fa5fe8a4059c9a42660028a6f883d6e12e36fdeea259c22e994512a6c65fe84438c86a5099dfcfee60dd391e598bc50faedadcd3cd61efd41d1bd3152df5a38a00884380984b996314197dcc883a4e388d174661fc97ba2b87c2e8f6"], 0x1c}}, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={<r2=>0x0, 0x1f}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x0, 0x6, 0x80, 0x8001, 0xfffffffffffffffb}, 0x14)

01:33:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00005622001d0005000000000000000000020000000800030021000000"], 0x1c}}, 0x0)

01:33:07 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:07 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5cd0)

01:33:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3f0)

01:33:08 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setflags(r0, 0x2, 0x1)
pipe(&(0x7f0000000100))
r1 = socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x4000000002}, [@nested={0x8, 0x3, [@generic='!']}]}, 0xd}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40, 0x0)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000540)=""/4096)

01:33:08 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x19e0)

01:33:08 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4740)

01:33:08 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1d10)

01:33:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x3)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x34)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={0x1, 0x0, 0x2080, {0x1000, 0x1002, 0x2}, [], "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", "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"})
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040))

01:33:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002b80)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000200)=0xfffffffffffffe27)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8)
sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x2420, 0x3a, 0x200, 0x70bd28, 0x25dfdbfe, {0x12}, [@typed={0x8, 0x14, @uid=r2}, @nested={0x1078, 0x2e, [@typed={0x4, 0x32}, @generic="2635ef64a538dff16eafdbaff57daccc914cf77267e6cce311bca0fb3304e784b8baa3efa3d829ee3007d7f0dfd69f9bd6ebc489a800b7719218294c1dd34f2ef7d451a18036f0e3874858da2ab9a330d298d4e6b7819866a2b2c63b5d47ca2a9b97999b8d0b6f03e6f6240ac725", @generic="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"]}, @nested={0x228, 0x6, [@generic="4f7e108e9db8daa128c5ca0bd0d492a8890cc802d5926d5e3da896ccc04db3bdfc223193c18cea567346fe790fa62900e6cdfb3b0e60dac4e38f849c4c0727ef129b8d67f47c29dbecc4d1faab5b807ee9be05c77e2e6d5dccce08455bcd2eed9049c6ffc55bfeaaf46081179a67e2aeff", @generic="f3df3d46b330c3befef3bd", @generic="5b27072d99550fbf34bff2260a48e3d28a204658a997c9cb5ecf033afbf4db8617f5ee3796006ec93320a1254dec6bfac9fe71ca20e13818722666d7c266af18d46a41c2e3f413efa9af467232346133e00b37aafb1294066d", @generic="0f7b505f308ebd6ffb15ad2a935c28609ed0d4fbddb0c6724a5bfb7bfb949caf82a55a230d204c8102a306aeb6aad26915fa6f3dc08861daa8c5297ad51cd27e4b9377fbeb054d7a02944f9533a5b093d55d1fc136048f6343880dadd3a0460055ff22f036ba0aad97a495d78e7870cca553bc11b12fb3596ce01062c66d3151c296ff959eee5b64489cbc501fc9b378aee51b0c45da196072594b4df5b206a5f5fff8b610862c7a4c7889a8cffb0d37ab60ee3dd1fb7b4a17127536cac23346f731fe079cfffed0c3c18f88dee0fdf4d18879263b34a87ef4f5959f27", @typed={0x5c, 0x67, @binary="aa6e5e0cdda0d394e15df36f626ab0e09587132cab830d846cc812b4d6caf4a59aa2763aa5db9190b8e576c0f148e5302c979cf8ed53ffc280bbf0e6c3fb349b4887b95447c28cbd5ef7dd729301da11a71df15a267a67"}, @typed={0x4, 0x35}, @typed={0x8, 0x58, @uid=r3}, @typed={0x8, 0x73, @ipv4=@broadcast}]}, @nested={0x1074, 0x72, [@generic="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", @typed={0x8, 0x19, @u32=0x8}, @generic="5e5198803f8465d31eebd31cc687f74678e93115ae70bf1793c11aaddd11613268a0f28ec49e7ab98cf72e0e9cca348756267824694f24274bc50767cbd8926055e40a0902e8adeea48bcd0ca3b453321590865ba60d9ac904c415eb5753e506be8a6285c59e8376"]}, @typed={0xf0, 0x11, @binary="876874643b97380bd6da57171d256d19ccfb4a22ccf597b1f18ca55d166dd900811afb72a472cffb8820edd861c2d1de71792852bf38559760fbfc80b3e6a788a88df501e45663f3b9e9b1879a34848da36bd5d866cc065cfca574ed47375c61983fc9908d42f4f294d9f7c65a243ffc3d6edbe32d91cf509f58dad930097c2c0dbb8ac7fd4e86f1b8328f636575894a7f9fd13a16a9c772bf670d2422d2d17988e614795953e009e7c3cf588706c59adbe04ef0f6a37be934593338edc82019e329e453cc0757c997990aa90bb6da0ee1e52c7c748917f4ee34f18ede836307f468e74f642f45523a9c"}]}, 0x2420}}, 0x4000000)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)

01:33:08 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2bf8)

01:33:08 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:08 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x678)

01:33:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0085b3a837d490d100000000000000020000000800030021000000bb9c6d4606186a8af80455b09ced7a2e65ccb4de68d41215a360592431570278462be24194c14c7f0cffedbc64d52421e50db3aae48dbaed26ce6ab9611c431868a7658515bd0e488ad1018ff8293d3f817688a7f5256e41135c0eac5fb228b1028b535d856b44f36ab271d3449c7ffae54480207f1297127f624edd5e35a3efe98390fdabf9b0"], 0x1c}}, 0x0)

01:33:09 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81)
syz_open_dev$midi(&(0x7f0000009ff5)='/dev/midi#\x00', 0x2, 0x202)
close(r0)
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4d70)

01:33:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000001e00)=ANY=[@ANYBLOB="bb7c3afe28c94e005a98654e6ce8f31ef62461184d8d5d67a4ff43e780d969552d750bc30929f83354748e25bcf7e84f3ed1f74f98bbc302c8acf42ff73cd4fc8733ec4d22821a186e01244046239a860ee764046cc7a1e040d84a2460890174459f13f903601c4c8344dc0fb92b2b129e24ec926d51de71f1c3dde711f1d2843768b562cd0c5fe0224715ad5747e788d4ec387c0b9886616b6452d3c2225f87a7aaac37214759be90eaffffa2ee07cb81dd0ba1", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="8eede8c5943a0df7cba1601b8590196eff070000000000001fb81991125e997d6b46bf5ead40207c19416c3cd12b829a2e92743445d93afd26f47f5bee2312ba86d858e97892850d2f94a9d6efab", @ANYRESOCT, @ANYRES32=r0]], 0x1}}, 0x2)
recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/151, 0x97}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000000600)=""/223, 0xdf}], 0x6, &(0x7f0000000700)=""/15, 0xf, 0xc7c0000000000000}, 0x9}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/243, 0xf3}, {&(0x7f00000018c0)=""/199, 0xc7}, {&(0x7f00000019c0)=""/188, 0xbc}, {&(0x7f0000001a80)=""/81, 0x51}], 0x5, &(0x7f0000001b80)=""/172, 0xac, 0xfffffffffffffffb}, 0x2}], 0x2, 0x40000000, &(0x7f0000001cc0)={0x77359400})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={<r2=>0x0, 0x9bb7, 0x30}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001d80)={0x0, 0x200, 0x71, 0x215, r2}, &(0x7f0000001dc0)=0x10)

01:33:09 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)="2f6465762f696e7075742f6576656e7423ff", 0x0, 0x2)

01:33:09 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xcc0)

01:33:09 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5ee0)

[  762.889162] binder_thread_write: 4 callbacks suppressed
[  762.889171] binder: 6854:6891 Acquire 1 refcount change on invalid ref 0 ret -22
[  762.902204] binder_thread_write: 4 callbacks suppressed
[  762.902211] binder: 6854:6891 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:09 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)="2f6465762f696e7075742f6576656e742302", 0x0, 0x2)

01:33:09 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)="2f6465762f696e7075742f6576656e7423f6", 0x0, 0x2)

01:33:09 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xea0)

[  763.000640] binder: 6896:6903 Acquire 1 refcount change on invalid ref 0 ret -22
[  763.008478] binder: 6896:6903 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7f80)

01:33:09 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:09 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2c28)

[  763.752763] binder: 6896:6940 Acquire 1 refcount change on invalid ref 0 ret -22
[  763.761039] binder: 6896:6940 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:10 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x10)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)={<r4=>0x0, 0x4e, "50fd317942b64a021282a092a1b6aacf287b488211a80329c977ba8e59b954671b054345770e7dd6bc67fd6b3439bc6dee4cf5eae11ed932a1158b70a335edfeefe175c206ac62371eb832b7e5bc"}, &(0x7f0000000380)=0x56)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={<r5=>r4, 0xfff, 0x40, 0x4dab09ce, 0x100000000008, 0xef}, &(0x7f0000000180)=0xffffffffffffff2c)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={r5, 0x12, 0x6, [0x3, 0x0, 0xa3, 0x49f, 0x9, 0x8]}, 0x14)

01:33:10 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:10 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5988)

01:33:10 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2658)

01:33:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x53a0)

01:33:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001000000000000685d4634f5339ce900030021000000"], 0x1c}}, 0x2)
r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x100000000, 0x1)
connect$rds(r1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={<r2=>0x0, 0x8}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r2, 0xf9, "8e7e2873b4aadfaee478deef1a3a1cde880e78991249f83f717ff9d96cdb9cac2bcc9aa2ac8de3f8334f07e01ead34feb16b5ae553f2fe36b91fda111ff8df778a4145ac7ad7fe2f4e07e75480916398f7c984c65fa376dfb3cc128b51780d8990c5c0d5d4353263a686e60e2b4a2b417d3fd81fd4d7120842df0baa5ed8c426d253bac677d73326d39f03ff8481e8fb487b59246b86b891d52a7fa80d1534bb447f186e41ef2e15ff0c0b0740b2e79952247f2020bbb8d7e31ad70e4d4c5d4b3a3cd84311213d67e069ce80160af8ee2d39eddf14cab1c82a370ef30930e44aabd40ac081f691cd6671f7e6e5daf3cbd1de38f801fe727a6b"}, &(0x7f0000000340)=0x101)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x5, 0xfff, 0x8, 0x6, 0x1ff}, &(0x7f00000001c0)=0x14)

[  763.869342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
01:33:10 executing program 3:
r0 = socket$pptp(0x18, 0x1, 0x2)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000300)=0x401, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000340)={0x2, 0x0, 0x100, 0x1f, 0xffffffff, 0x1000})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}, 0x4}, r3}}, 0x38)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x1000, "ff00", 0x7445})
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0xfc, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@generic="104594c243f8cf537a9b559b9bcfae6ffd11c8567de2bdaf77310b21e4994a4efe161f1bdb3ed3e486f84a4fdedc7404f8a381a5a858319ffe3618d0a69a414c179e4f2c239681e91812ff7bc634afd0fa6f07a2f24f34c534f7741426b3cc05f38621e1991da7f9feb95b4462c1ae759e21999876e3e97f75e99ca8ed90bec4930059558ea8b3ee2d561f0ec1992c1b1435383d97b65d7eecad03c40de718a4556410e21cfccb14d4cc595b3ea3a02ca736931fccbf5b4c5c9afd8ec08bb26a7fc6fcb518cfe25bd539499d822d393add0340da8bfada9b14ca03609eac545065cfcbba69"]}, 0xfc}}, 0x10)

[  763.915469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  763.928166] binder: 6953:6956 Acquire 1 refcount change on invalid ref 0 ret -22
[  763.935813] binder: 6953:6956 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:10 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)="2f6465762f696e7075742f6576656e742303", 0x0, 0x2)

01:33:10 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

[  763.979802] netlink: 232 bytes leftover after parsing attributes in process `syz-executor3'.
01:33:10 executing program 3:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x802, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000814}, 0x20004000)
r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b63"], 0x0, 0x0, &(0x7f0000000180)})
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e22, 0x4075, @local, 0x1}, {0xa, 0x4e23, 0x9, @local, 0x3}, 0x8000, [0x1000, 0x400, 0x1ff, 0x2, 0xa653, 0x4, 0xb9, 0x3]}, 0x5c)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3618)

01:33:10 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x3978)

[  764.137173] binder: 6973:6975 unknown command 25371
[  764.142302] binder: 6973:6975 ioctl c0306201 20000200 returned -22
[  764.153084] binder: 6973:6975 Acquire 1 refcount change on invalid ref 0 ret -22
[  764.160732] binder: 6973:6975 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:11 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x800, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipddp0\x00', r2})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r2, @local, @remote}, 0xc)
r3 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:11 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x7440)

01:33:11 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)

01:33:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xee8)

01:33:11 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x318)

[  764.704765] binder: 6953:6992 Acquire 1 refcount change on invalid ref 0 ret -22
[  764.712517] binder: 6953:6992 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:11 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={<r1=>0x0, @in={{0x2, 0x4e23, @loopback}}, [0x8000, 0x6, 0x4, 0xcb7, 0x10900000000, 0x4, 0x5, 0x1, 0x4, 0xff, 0x400, 0x3, 0x7, 0x81]}, &(0x7f0000000040)=0x100)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x6}, 0x8)
socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:11 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0xffff8000, 0x2)

01:33:11 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x1000000000000, 0x2)

[  764.851032] binder: 7016:7017 unknown command 0
[  764.856084] binder: 7016:7017 ioctl c0306201 20000200 returned -22
[  764.879842] binder: 7016:7017 Acquire 1 refcount change on invalid ref 0 ret -22
[  764.887651] binder: 7016:7017 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:11 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5778)

01:33:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x20d0)

01:33:11 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x80ffff00000000, 0x2)

01:33:11 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x828)

01:33:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4a10)

01:33:11 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x4, 0x2)

01:33:11 executing program 3 (fault-call:2 fault-nth:0):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:33:11 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x74a0)

[  765.101144] FAULT_INJECTION: forcing a failure.
[  765.101144] name failslab, interval 1, probability 0, space 0, times 0
[  765.113097] CPU: 0 PID: 7054 Comm: syz-executor3 Not tainted 4.19.0-rc7-next-20181011+ #92
[  765.121505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  765.130858] Call Trace:
[  765.133526]  dump_stack+0x244/0x3ab
[  765.137175]  ? dump_stack_print_info.cold.2+0x52/0x52
[  765.142395]  should_fail.cold.4+0xa/0x17
[  765.146495]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  765.151623]  ? __f_unlock_pos+0x19/0x20
[  765.155625]  ? lock_downgrade+0x900/0x900
[  765.159779]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  765.165326]  ? proc_fail_nth_write+0x9e/0x210
[  765.169834]  ? kasan_check_read+0x11/0x20
[  765.173998]  ? fs_reclaim_acquire+0x20/0x20
[  765.178356]  ? lock_downgrade+0x900/0x900
[  765.182537]  ? perf_trace_sched_process_exec+0x860/0x860
[  765.187988]  ? __fsnotify_parent+0xcc/0x420
[  765.192297]  ? fsnotify+0xf10/0xf10
[  765.195913]  __should_failslab+0x124/0x180
[  765.200134]  should_failslab+0x9/0x14
[  765.203920]  __kmalloc_track_caller+0x2d1/0x760
[  765.208636]  ? strncpy_from_user+0x5a0/0x5a0
[  765.213052]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  765.218614]  ? strndup_user+0x77/0xd0
[  765.222399]  memdup_user+0x2c/0xa0
[  765.225938]  strndup_user+0x77/0xd0
[  765.229558]  ksys_mount+0x3c/0x140
[  765.233114]  __x64_sys_mount+0xbe/0x150
[  765.237076]  do_syscall_64+0x1b9/0x820
[  765.240964]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  765.246331]  ? syscall_return_slowpath+0x5e0/0x5e0
[  765.251246]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  765.256073]  ? trace_hardirqs_on_caller+0x310/0x310
[  765.261084]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  765.266089]  ? prepare_exit_to_usermode+0x291/0x3b0
[  765.271100]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  765.275945]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  765.281132] RIP: 0033:0x457519
01:33:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5c70)

[  765.284334] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  765.303225] RSP: 002b:00007f5818aabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  765.310916] RAX: ffffffffffffffda RBX: 00007f5818aabc90 RCX: 0000000000457519
[  765.318170] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
[  765.325430] RBP: 000000000072bf00 R08: 00000000200003c0 R09: 0000000000000000
[  765.332708] R10: 000000000280002d R11: 0000000000000246 R12: 00007f5818aac6d4
[  765.339961] R13: 00000000004c28a6 R14: 00000000004d3cc0 R15: 0000000000000003
01:33:12 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
r0 = socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r1=>0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080))
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x12, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x28, 0x0, &(0x7f0000000040)="fac95a00ce44ba39fc6631fe375ec6f2f353b3e2d0a35371f872b78cf1c360ad3b67290a86e7aaf9"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:12 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x100000000000000, 0x2)

01:33:12 executing program 3 (fault-call:2 fault-nth:1):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:33:12 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5b80)

01:33:12 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x2f58)

01:33:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xc78)

[  765.637352] binder: 7016:7068 unknown command 0
[  765.642088] binder: 7016:7068 ioctl c0306201 20000200 returned -22
[  765.648945] binder: 7016:7027 Acquire 1 refcount change on invalid ref 0 ret -22
[  765.656865] binder: 7016:7027 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  765.714053] FAULT_INJECTION: forcing a failure.
[  765.714053] name failslab, interval 1, probability 0, space 0, times 0
[  765.736323] CPU: 1 PID: 7084 Comm: syz-executor3 Not tainted 4.19.0-rc7-next-20181011+ #92
[  765.744742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  765.754117] Call Trace:
[  765.756730]  dump_stack+0x244/0x3ab
[  765.760375]  ? dump_stack_print_info.cold.2+0x52/0x52
[  765.765617]  should_fail.cold.4+0xa/0x17
[  765.769699]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  765.774811]  ? perf_trace_lock+0x7a0/0x7a0
[  765.779053]  ? kasan_kmalloc+0xc7/0xe0
[  765.783014]  ? __kmalloc_track_caller+0x157/0x760
[  765.787877]  ? memdup_user+0x2c/0xa0
[  765.791596]  ? strndup_user+0x77/0xd0
[  765.795462]  ? ksys_mount+0x3c/0x140
[  765.799226]  ? __x64_sys_mount+0xbe/0x150
[  765.803403]  ? do_syscall_64+0x1b9/0x820
[  765.807489]  ? proc_fail_nth_write+0x9e/0x210
[  765.812005]  ? kasan_check_read+0x11/0x20
[  765.816176]  ? fs_reclaim_acquire+0x20/0x20
[  765.820526]  ? lock_downgrade+0x900/0x900
[  765.824694]  ? perf_trace_sched_process_exec+0x860/0x860
[  765.830223]  ? lock_release+0xa10/0xa10
[  765.834227]  ? perf_trace_sched_process_exec+0x860/0x860
[  765.838969] binder: 7075:7076 unknown command 1717991472
[  765.839692]  ? usercopy_warn+0x110/0x110
[  765.845209] binder: 7075:7076 ioctl c0306201 20000200 returned -22
[  765.849225]  __should_failslab+0x124/0x180
[  765.859210] binder: 7075:7076 Acquire 1 refcount change on invalid ref 0 ret -22
[  765.859782]  should_failslab+0x9/0x14
[  765.867343] binder: 7075:7076 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  765.871103]  kmem_cache_alloc_trace+0x2d7/0x750
[  765.882673]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  765.888225]  ? _copy_from_user+0xdf/0x150
[  765.892392]  copy_mount_options+0x5f/0x430
[  765.896669]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  765.902243]  ksys_mount+0xd0/0x140
[  765.905796]  __x64_sys_mount+0xbe/0x150
[  765.905814]  do_syscall_64+0x1b9/0x820
[  765.905833]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  765.919062]  ? syscall_return_slowpath+0x5e0/0x5e0
[  765.923997]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  765.928852]  ? trace_hardirqs_on_caller+0x310/0x310
[  765.933879]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  765.938913]  ? prepare_exit_to_usermode+0x291/0x3b0
[  765.944017]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  765.948887]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  765.954083] RIP: 0033:0x457519
01:33:12 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x400000000000000, 0x2)

01:33:12 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x4000000, 0x2)

[  765.957290] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  765.976199] RSP: 002b:00007f5818aabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  765.983916] RAX: ffffffffffffffda RBX: 00007f5818aabc90 RCX: 0000000000457519
[  765.991194] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
[  765.998466] RBP: 000000000072bf00 R08: 00000000200003c0 R09: 0000000000000000
[  765.998476] R10: 000000000280002d R11: 0000000000000246 R12: 00007f5818aac6d4
01:33:12 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x300, 0x2)

01:33:12 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x2000000, 0x2)

01:33:12 executing program 3 (fault-call:2 fault-nth:2):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

[  765.998485] R13: 00000000004c28a6 R14: 00000000004d3cc0 R15: 0000000000000003
01:33:12 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x5238)

[  766.088446] FAULT_INJECTION: forcing a failure.
[  766.088446] name failslab, interval 1, probability 0, space 0, times 0
[  766.108702] CPU: 1 PID: 7111 Comm: syz-executor3 Not tainted 4.19.0-rc7-next-20181011+ #92
[  766.117150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  766.126526] Call Trace:
[  766.129135]  dump_stack+0x244/0x3ab
[  766.132807]  ? dump_stack_print_info.cold.2+0x52/0x52
[  766.138018]  should_fail.cold.4+0xa/0x17
[  766.142091]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  766.147220]  ? lock_downgrade+0x900/0x900
[  766.151381]  ? finish_task_switch+0x1b5/0x900
[  766.155887]  ? trace_hardirqs_on+0xbd/0x310
[  766.160220]  ? kasan_check_read+0x11/0x20
[  766.164416]  ? finish_task_switch+0x1f5/0x900
[  766.168927]  ? trace_hardirqs_off_caller+0x300/0x300
[  766.174044]  ? compat_start_thread+0x80/0x80
[  766.178531]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  766.184086]  ? _raw_spin_unlock_irq+0x60/0x80
[  766.188590]  ? finish_task_switch+0x1f5/0x900
[  766.193102]  ? fs_reclaim_acquire+0x20/0x20
[  766.197422]  ? lock_downgrade+0x900/0x900
[  766.201585]  ? perf_trace_sched_process_exec+0x860/0x860
[  766.207047]  ? __schedule+0x8d7/0x21d0
[  766.210963]  ? copy_mount_options+0x5f/0x430
[  766.215392]  __should_failslab+0x124/0x180
[  766.219657]  should_failslab+0x9/0x14
[  766.223472]  kmem_cache_alloc+0x2be/0x730
[  766.227614]  getname_flags+0xd0/0x590
[  766.231403]  ? retint_kernel+0x2d/0x2d
[  766.235302]  user_path_at_empty+0x2d/0x50
[  766.239448]  do_mount+0x180/0x1d90
[  766.242995]  ? copy_mount_string+0x40/0x40
[  766.247218]  ? trace_hardirqs_off+0xaf/0x310
[  766.251626]  ? retint_kernel+0x2d/0x2d
[  766.255505]  ? copy_mount_options+0x239/0x430
[  766.259987]  ? copy_mount_options+0x247/0x430
[  766.264472]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  766.269995]  ? copy_mount_options+0x315/0x430
[  766.274478]  ksys_mount+0x12d/0x140
[  766.278111]  __x64_sys_mount+0xbe/0x150
[  766.282089]  do_syscall_64+0x1b9/0x820
[  766.285967]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  766.291317]  ? syscall_return_slowpath+0x5e0/0x5e0
[  766.296232]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  766.301061]  ? trace_hardirqs_on_caller+0x310/0x310
[  766.306065]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  766.311079]  ? prepare_exit_to_usermode+0x291/0x3b0
[  766.316082]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  766.320950]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  766.326135] RIP: 0033:0x457519
[  766.329436] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  766.348368] RSP: 002b:00007f5818aabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  766.356083] RAX: ffffffffffffffda RBX: 00007f5818aabc90 RCX: 0000000000457519
[  766.363344] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
[  766.370659] RBP: 000000000072bf00 R08: 00000000200003c0 R09: 0000000000000000
[  766.377932] R10: 000000000280002d R11: 0000000000000246 R12: 00007f5818aac6d4
[  766.385308] R13: 00000000004c28a6 R14: 00000000004d3cc0 R15: 0000000000000003
[  766.509288] binder: 7075:7086 unknown command 1717991472
[  766.514886] binder: 7075:7086 ioctl c0306201 20000200 returned -22
[  766.515001] binder: 7075:7086 Acquire 1 refcount change on invalid ref 0 ret -22
[  766.528864] binder: 7075:7086 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
01:33:12 executing program 4:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
pipe(&(0x7f0000000100))
socket$inet6(0xa, 0x80a, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
sched_setattr(0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000180)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000f4d)})

01:33:12 executing program 0:
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8bb0)

01:33:12 executing program 3 (fault-call:2 fault-nth:3):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

01:33:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x8748)

01:33:12 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0xfffffff6, 0x2)

01:33:12 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x1668)

01:33:13 executing program 5:
syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x3, 0x2)

[  766.630554] FAULT_INJECTION: forcing a failure.
[  766.630554] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  766.642513] CPU: 1 PID: 7133 Comm: syz-executor3 Not tainted 4.19.0-rc7-next-20181011+ #92
[  766.650920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  766.660282] Call Trace:
[  766.662879]  dump_stack+0x244/0x3ab
[  766.666521]  ? dump_stack_print_info.cold.2+0x52/0x52
[  766.671739]  ? mark_held_locks+0x130/0x130
[  766.676012]  should_fail.cold.4+0xa/0x17
[  766.676029]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  766.676047]  ? perf_trace_lock_acquire+0x15b/0x800
[  766.685206]  ? perf_trace_lock+0x7a0/0x7a0
[  766.685223]  ? mark_held_locks+0x130/0x130
[  766.685236]  ? perf_trace_lock+0x7a0/0x7a0
[  766.685254]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  766.685272]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  766.713918]  ? check_preemption_disabled+0x48/0x200
[  766.718946]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  766.723970]  ? debug_smp_processor_id+0x1c/0x20
[  766.728652]  ? perf_trace_lock_acquire+0x15b/0x800
[  766.733610]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  766.739156]  ? should_fail+0x22d/0xd01
[  766.743054]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  766.748175]  __alloc_pages_nodemask+0x34b/0xdd0
[  766.752860]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[  766.758161]  ? __alloc_pages_slowpath+0x2de0/0x2de0
[  766.763208]  ? is_bpf_text_address+0xd3/0x170
[  766.767713]  ? kernel_text_address+0x79/0xf0
[  766.772125]  ? __kernel_text_address+0xd/0x40
[  766.776635]  ? fs_reclaim_acquire+0x20/0x20
[  766.780971]  ? lock_downgrade+0x900/0x900
[  766.785143]  ? trace_hardirqs_off+0xb8/0x310
[  766.789553]  cache_grow_begin+0xa5/0x8c0
[  766.793616]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  766.799184]  ? check_preemption_disabled+0x48/0x200
[  766.804204]  kmem_cache_alloc+0x66b/0x730
[  766.808343]  getname_flags+0xd0/0x590
[  766.812124]  ? fs_reclaim_acquire+0x20/0x20
[  766.816438]  user_path_at_empty+0x2d/0x50
[  766.820598]  do_mount+0x180/0x1d90
[  766.824161]  ? trace_hardirqs_on+0xbd/0x310
[  766.828497]  ? copy_mount_options+0x5f/0x430
[  766.832922]  ? copy_mount_string+0x40/0x40
[  766.837163]  ? kasan_unpoison_shadow+0x35/0x50
[  766.841766]  ? kasan_kmalloc+0xc7/0xe0
[  766.845666]  ? kmem_cache_alloc_trace+0x31f/0x750
[  766.850505]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  766.856052]  ? _copy_from_user+0xdf/0x150
[  766.860194]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  766.865720]  ? copy_mount_options+0x315/0x430
[  766.870214]  ksys_mount+0x12d/0x140
[  766.873825]  __x64_sys_mount+0xbe/0x150
[  766.877789]  do_syscall_64+0x1b9/0x820
[  766.881663]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  766.887018]  ? syscall_return_slowpath+0x5e0/0x5e0
[  766.891952]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  766.896795]  ? trace_hardirqs_on_caller+0x310/0x310
[  766.901798]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  766.906801]  ? prepare_exit_to_usermode+0x291/0x3b0
[  766.911808]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  766.916665]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  766.921837] RIP: 0033:0x457519
[  766.925030] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  766.943915] RSP: 002b:00007f5818aabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  766.951613] RAX: ffffffffffffffda RBX: 00007f5818aabc90 RCX: 0000000000457519
[  766.958895] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
[  766.966152] RBP: 000000000072bf00 R08: 00000000200003c0 R09: 0000000000000000
[  766.973407] R10: 000000000280002d R11: 0000000000000246 R12: 00007f5818aac6d4
01:33:13 executing program 3 (fault-call:2 fault-nth:4):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500))
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x280002d, &(0x7f00000003c0)={[{@mode={'mode'}}]})

[  766.980670] R13: 00000000004c28a6 R14: 00000000004d3cc0 R15: 0000000000000003
[  767.069091] FAULT_INJECTION: forcing a failure.
[  767.069091] name failslab, interval 1, probability 0, space 0, times 0
[  767.081066] CPU: 0 PID: 7147 Comm: syz-executor3 Not tainted 4.19.0-rc7-next-20181011+ #92
[  767.089495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  767.098852] Call Trace:
[  767.098878]  dump_stack+0x244/0x3ab
[  767.098907]  ? dump_stack_print_info.cold.2+0x52/0x52
[  767.110287]  should_fail.cold.4+0xa/0x17
01:33:13 executing program 1:
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x58f8)

01:33:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0x4818)

[  767.114374]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  767.114410]  ? trace_hardirqs_off+0xb8/0x310
[  767.114456]  ? trace_hardirqs_on+0x310/0x310
[  767.114473]  ? debug_check_no_obj_freed+0x305/0x58d
[  767.114487]  ? check_preemption_disabled+0x48/0x200
[  767.114505]  ? putname+0xf2/0x130
[  767.114530]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  767.124046]  ? fs_reclaim_acquire+0x20/0x20
[  767.133469]  ? lock_downgrade+0x900/0x900
[  767.133490]  ? perf_trace_sched_process_exec+0x860/0x860
[  767.133515]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  767.166933]  __should_failslab+0x124/0x180
[  767.171183]  should_failslab+0x9/0x14
[  767.174996]  kmem_cache_alloc_trace+0x2d7/0x750
[  767.179684]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  767.185224]  vfs_new_fs_context+0x5e/0x77c
[  767.189484]  ? ns_capable_common+0x13f/0x170
[  767.193919]  do_mount+0xb70/0x1d90
[  767.197493]  ? copy_mount_string+0x40/0x40
[  767.201766]  ? trace_hardirqs_off+0xaf/0x310
[  767.206173]  ? retint_kernel+0x2d/0x2d
[  767.210078]  ? copy_mount_options+0x1e3/0x430
[  767.214561]  ? __sanitizer_cov_trace_pc+0x48/0x50
[  767.219391]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  767.224973]  ? copy_mount_options+0x315/0x430
[  767.229483]  ksys_mount+0x12d/0x140
[  767.233110]  __x64_sys_mount+0xbe/0x150
[  767.237075]  do_syscall_64+0x1b9/0x820
[  767.240950]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  767.246304]  ? syscall_return_slowpath+0x5e0/0x5e0
[  767.251222]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  767.256052]  ? trace_hardirqs_on_caller+0x310/0x310
[  767.261078]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  767.266078]  ? prepare_exit_to_usermode+0x291/0x3b0
[  767.271088]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  767.275942]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  767.281116] RIP: 0033:0x457519
[  767.284295] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  767.303192] RSP: 002b:00007f5818aabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  767.310918] RAX: ffffffffffffffda RBX: 00007f5818aabc90 RCX: 0000000000457519
[  767.318193] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
[  767.325465] RBP: 000000000072bf00 R08: 00000000200003c0 R09: 0000000000000000
[  767.332785] R10: 000000000280002d R11: 0000000000000246 R12: 00007f5818aac6d4
[  767.340077] R13: 00000000004c28a6 R14: 00000000004d3cc0 R15: 0000000000000003
[  767.347756] BUG: unable to handle kernel paging request at fffffffffffffff4
[  767.354865] PGD 926d067 P4D 926d067 PUD 926f067 PMD 0 
[  767.360171] Oops: 0000 [#1] PREEMPT SMP KASAN
[  767.364671] CPU: 0 PID: 7147 Comm: syz-executor3 Not tainted 4.19.0-rc7-next-20181011+ #92
[  767.373086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  767.382443] RIP: 0010:do_mount+0xb98/0x1d90
[  767.386785] Code: 06 00 48 89 c2 48 89 c3 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8a 11 00 00 48 b8 00 00 00 00 00 fc ff df <4c> 8b 33 49 8d 7e 18 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 5e 11
[  767.405689] RSP: 0018:ffff8801764ffc28 EFLAGS: 00010246
[  767.411060] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90007e9e000
[  767.418351] RDX: 1ffffffffffffffe RSI: ffffffff81e08e2c RDI: ffffffff89703f00
[  767.425613] RBP: ffff8801764ffdb0 R08: ffff8801d896e400 R09: fffffbfff1287122
[  767.432870] R10: fffffbfff1287122 R11: ffffffff89438913 R12: ffff8801becd6e30
[  767.440153] R13: ffff8801d9402780 R14: ffff8801d9402780 R15: ffff880181e92c00
[  767.447422] FS:  00007f5818aac700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[  767.455652] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  767.461549] CR2: fffffffffffffff4 CR3: 000000017aa23000 CR4: 00000000001406f0
[  767.468808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  767.476217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  767.483533] Call Trace:
[  767.486156]  ? copy_mount_string+0x40/0x40
[  767.490433]  ? trace_hardirqs_off+0xaf/0x310
[  767.494848]  ? retint_kernel+0x2d/0x2d
[  767.498732]  ? copy_mount_options+0x1e3/0x430
[  767.503214]  ? __sanitizer_cov_trace_pc+0x48/0x50
[  767.508073]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  767.513612]  ? copy_mount_options+0x315/0x430
[  767.518106]  ksys_mount+0x12d/0x140
[  767.521751]  __x64_sys_mount+0xbe/0x150
[  767.525734]  do_syscall_64+0x1b9/0x820
[  767.529609]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  767.534964]  ? syscall_return_slowpath+0x5e0/0x5e0
[  767.539908]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  767.544877]  ? trace_hardirqs_on_caller+0x310/0x310
[  767.549891]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  767.554930]  ? prepare_exit_to_usermode+0x291/0x3b0
[  767.559968]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  767.564815]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  767.569987] RIP: 0033:0x457519
[  767.573183] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  767.592067] RSP: 002b:00007f5818aabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  767.599758] RAX: ffffffffffffffda RBX: 00007f5818aabc90 RCX: 0000000000457519
[  767.607037] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
[  767.614324] RBP: 000000000072bf00 R08: 00000000200003c0 R09: 0000000000000000
[  767.621632] R10: 000000000280002d R11: 0000000000000246 R12: 00007f5818aac6d4
[  767.628912] R13: 00000000004c28a6 R14: 00000000004d3cc0 R15: 0000000000000003
[  767.636194] Modules linked in:
[  767.639385] CR2: fffffffffffffff4
[  767.642846] ---[ end trace 2f842eadceed2087 ]---
[  767.647603] RIP: 0010:do_mount+0xb98/0x1d90
[  767.651919] Code: 06 00 48 89 c2 48 89 c3 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8a 11 00 00 48 b8 00 00 00 00 00 fc ff df <4c> 8b 33 49 8d 7e 18 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 5e 11
[  767.670837] RSP: 0018:ffff8801764ffc28 EFLAGS: 00010246
[  767.676194] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90007e9e000
[  767.683472] RDX: 1ffffffffffffffe RSI: ffffffff81e08e2c RDI: ffffffff89703f00
[  767.690750] RBP: ffff8801764ffdb0 R08: ffff8801d896e400 R09: fffffbfff1287122
[  767.698024] R10: fffffbfff1287122 R11: ffffffff89438913 R12: ffff8801becd6e30
[  767.705292] R13: ffff8801d9402780 R14: ffff8801d9402780 R15: ffff880181e92c00
[  767.712606] FS:  00007f5818aac700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[  767.720835] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  767.726755] CR2: fffffffffffffff4 CR3: 000000017aa23000 CR4: 00000000001406f0
[  767.734026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  767.741292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  767.748547] Kernel panic - not syncing: Fatal exception
[  767.754903] Kernel Offset: disabled
[  767.758532] Rebooting in 86400 seconds..