x200, 0x3, 0x7, 0x1, 0x10001}, 0x14)

05:21:29 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x294}, {r0, 0x200}, {r1, 0x224}, {r0, 0x100}, {r0, 0x400}, {r0, 0x1}, {r1, 0x4188}], 0x7, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)={0xe8}, 0x8)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:29 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r7 = dup(r1)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x36, r6})
shutdown(r7, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06630428502b42c4"], 0x0, 0x0, &(0x7f0000000680)})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:29 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:29 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
accept$packet(r1, &(0x7f00000004c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
sendto$packet(r1, &(0x7f00000007c0)="658de506ca556dc97a26f2b5d2a5f35b30fa182d4c623d5e92596a86a05d05a1920e496b5b1739353bb4e63002495903f4203b23652b44ffa9ef9181a5b7a46247eba401f9f43d31fb488179b41fc847e21448d454ffff6ac2b5988769d5b1c2c9593abd063393e0137058ad3d67dd9f394f6b13444ad915850811686b6b08dac59640b9ab1e28e5db162e09d6cfbf6a", 0x90, 0x80, &(0x7f00000006c0)={0x11, 0x0, r6, 0x1, 0x7fffffff, 0x6, @dev={[], 0x18}}, 0x14)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c63ec00274a9662818bbbef52263460a7fbd5e676420e4d86cf007b3c669f5c"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r7 = dup(r5)
shutdown(r7, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08631040", @ANYRES64=0x0, @ANYBLOB="0000000000000005"], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)=0x2)

05:21:29 executing program 0:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r0}, 0x10)
flock(0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40000000000027, &(0x7f0000001980)={@broadcast, @remote, @initdev}, &(0x7f0000000300)=0xfffffffffffffe56)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000800), &(0x7f00000004c0)=0x4)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000240))
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00')
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40041)
r2 = dup3(r1, 0xffffffffffffffff, 0x1004)
r3 = add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000480)={'syz'}, &(0x7f0000000840), 0x0, 0xffffffffffffffff)
keyctl$assume_authority(0x10, r3)
r4 = socket$key(0xf, 0x3, 0x2)
fcntl$setlease(r2, 0x400, 0x2)
socket$inet6(0xa, 0x1, 0x4)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000580)={@broadcast, @empty, <r5=>0x0}, &(0x7f00000005c0)=0xc)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@empty, @empty, @mcast1, 0x2, 0xc6, 0x2, 0x500, 0x100000001, 0x400100, r5})
write$smack_current(r2, &(0x7f00000007c0)='/proc/thread-self/attr/current\x00', 0x1f)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="020700090900000000000000feffffff0700080068010000db6062f181dbf49f07884396d944ee8c5860a5d0307cd51785267a691699380f67bedbc54fa8ac25bfef418789040000dd30ce86f9cac0dd39e98bd58b3f14a6e900001d196a574616187e58061c1a223daa5e5dca7eec753ae143a3ff22f7001a6811b3f0e9e64037d3777615e6786c0c33628ff10d11b30ee86eae21f02ec4f241aa7ba7423cb8f25c8483a5f790b9edc0a3e5c771185d59f0f7aa884a"], 0x48}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x80000}, {{@in6, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x10006}}, 0xe8)
sendmmsg(r6, &(0x7f0000007e00), 0x400000000000058, 0x0)
mkdir(&(0x7f0000000740)='./file0\x00', 0x6)
sendto$unix(r0, &(0x7f0000000940)="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", 0x1000, 0x800000000040041, 0x0, 0x0)

05:21:30 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r1, @ANYBLOB=',obj_role=smlfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r2, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000440)='net/softnet_stat\x00')
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000540)=""/56)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000020004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="c2e25dd3b9012e95fbca945e22a420bd1a7ddb45645d95d080025134c80d3cb94cc0fbaaf41fc17521531a6450293ec28e997dde41c99b81d1793bae3c6ea11e314fa2d1e9868692c862944c671e524a728f7173cd79c6b04046f2440db5171a0cd039d9eb8c59cb", @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:30 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
accept$packet(r1, &(0x7f00000004c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
sendto$packet(r1, &(0x7f00000007c0)="658de506ca556dc97a26f2b5d2a5f35b30fa182d4c623d5e92596a86a05d05a1920e496b5b1739353bb4e63002495903f4203b23652b44ffa9ef9181a5b7a46247eba401f9f43d31fb488179b41fc847e21448d454ffff6ac2b5988769d5b1c2c9593abd063393e0137058ad3d67dd9f394f6b13444ad915850811686b6b08dac59640b9ab1e28e5db162e09d6cfbf6a", 0x90, 0x80, &(0x7f00000006c0)={0x11, 0x0, r6, 0x1, 0x7fffffff, 0x6, @dev={[], 0x18}}, 0x14)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c63ec00274a9662818bbbef52263460a7fbd5e676420e4d86cf007b3c669f5c"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r7 = dup(r5)
shutdown(r7, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08631040", @ANYRES64=0x0, @ANYBLOB="0000000000000005"], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)=0x2)

05:21:30 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r1, @ANYBLOB="2c736d61636b66737472616e656c2c736dff03000073666c6f6f723d7472757374656423216c6f626465762c00"])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
sendmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="a1441718e605a9f55b52a3d58b081d9f5906dd02bec1fd9487720c92ac1370c6c53c094467d329a3ce6bcd7339e386c9ee3b1e547ce34cf2219a3e764a93cb9af0b3c805ff3c32c6b9b85540150700df360becae221a2825", 0x58}, {&(0x7f0000000600)="430b402af0dfc196528740eae23806b297e276fef6d989701bc2ffa44e1d3d921de445f958c005f4852e39aab5ee2835782f26e31cdf233fc7b8523c1a0aa55aa3b48153a4ea252b1d1963577e94b94bbc524f37814d5657a8b6a8e197c88e7b5bb9e4598294396f036a1c59a57809370a3a6bbc0826eedfbc9dd3721bfb10dc75d81d5bf49fe00fefbee06f1393168f8b0f5df9489aa516b9291d74ecafe68c0de14af736b10bd52394d4956ab8ac8b731f345ef756fffc5c1774211bc86e0a60a23dd1dee63e4608677df763bde94d3107c29b19c3c65ae29b84555d189ad57551a7", 0xe3}], 0x2, &(0x7f0000000540)=[{0x10, 0xff, 0x2}], 0x10}, 0x12}], 0x1, 0x80)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1082.086948] binder: BINDER_SET_CONTEXT_MGR already set
[ 1082.096897] binder: 12452:12479 ioctl 40046207 0 returned -16
[ 1082.105730] binder: 12452:12479 unknown command 671376134
[ 1082.111422] binder: 12452:12479 ioctl c0306201 200001c0 returned -22
05:21:30 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
accept$packet(r1, &(0x7f00000004c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
sendto$packet(r1, &(0x7f00000007c0)="658de506ca556dc97a26f2b5d2a5f35b30fa182d4c623d5e92596a86a05d05a1920e496b5b1739353bb4e63002495903f4203b23652b44ffa9ef9181a5b7a46247eba401f9f43d31fb488179b41fc847e21448d454ffff6ac2b5988769d5b1c2c9593abd063393e0137058ad3d67dd9f394f6b13444ad915850811686b6b08dac59640b9ab1e28e5db162e09d6cfbf6a", 0x90, 0x80, &(0x7f00000006c0)={0x11, 0x0, r6, 0x1, 0x7fffffff, 0x6, @dev={[], 0x18}}, 0x14)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c63ec00274a9662818bbbef52263460a7fbd5e676420e4d86cf007b3c669f5c"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r7 = dup(r5)
shutdown(r7, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08631040", @ANYRES64=0x0, @ANYBLOB="0000000000000005"], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000480)=0x2)

05:21:30 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC, @ANYBLOB="2c736d61636b66737472616e736d7506653d2e2c7365636c6162656c0000000001000000666c6f6f723d74656423216c6f626465762c0000000000"])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r4 = add_key(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)="9b64a948c2cefa2d78ef141657fec49c00932cdc6085dcf7198cad29917b0bff08bb4566e5b219970154a1c3d054a34c99e8c8388a455ff6062964ccbffd772f7f4f5b3cb335941df8a49d31638f6b61ad3f5b2d6feaac93ded9a422e76457f70203acf8b04fd668e6a0f5925cfcd2d2482175128b173dcc30c7f59d632c0c80f29339cd3c40a9001c9ba6766e638fa2dce7fe089f297a78d94373b3b1a9104bedc7289fcffa77a2f5dad6177ce788e84de6", 0xb2, 0xfffffffffffffffa)
add_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r4)
r5 = add_key(&(0x7f0000000740)='logon\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f0000000880)="a87c2b8694ac6a47ec48d05a7c4c8a937f6f8f80a4db77fc792d225cb6a2ff74173b18468a3b0d68a8190cf87cc6c703215716865f618695f319b6b1d79bbd0bfdf5e04d", 0x44, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)="201da9bbbb76b5746a74b5ccd0b5088a3f87bd17dc70e3b07dfa4e3a1a4715ec246227c9c55bb947ebdecd2c8e0798450b7294ef5583cad3d3702731c0badbdbea728568443aa0b31c5b2875b0f11ed6175eff83a22e978235e80a5db2b9f538bb088d70", 0x64, r5)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000600)={0x10, 0x95, {0x57, 0x200, 0x80000000, {0x40}, {0x0, 0x3e99}, @period={0x59, 0x40, 0xfffffffffffffffb, 0x200, 0x6, {0x10000, 0x9, 0x400, 0x7fffffff}, 0x1, &(0x7f0000000440)=[0x6]}}, {0x57, 0xe9b, 0x80, {0x6, 0x1ff}, {0x0, 0xed0e}, @ramp={0x0, 0x5, {0x9, 0x3, 0xfff, 0x910a}}}})

05:21:30 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x40000000, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
connect$packet(r0, &(0x7f00000000c0)={0x11, 0x4, r2, 0x1, 0x9, 0x6, @local}, 0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:30 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioprio_get$pid(0x1, r0)

05:21:30 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000540)=0x3)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(r0, 0x3f)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
connect$inet(r4, &(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x1}, 0x10)

[ 1082.796421] binder: BINDER_SET_CONTEXT_MGR already set
[ 1082.802590] binder: 12484:12484 ioctl 40046207 0 returned -16
[ 1082.803806] binder: 12484:12602 unknown command 671376134
[ 1082.814151] binder: 12484:12602 ioctl c0306201 200001c0 returned -22
05:21:30 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x1800000008000, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/152, &(0x7f0000000000)=0x98)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1082.857975] binder: release 12452:12479 transaction 1431 out, still active
[ 1082.870316] binder: release 12484:12602 transaction 1434 out, still active
05:21:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:32 executing program 4:
r0 = socket(0x0, 0x801, 0x2)
ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000000)="c9587ed6b5eac6ac3f7c551dd97c7cc8c9574b3551bee9c69ba966a9aebf4ae71a700a715a7c6ea131cf28ec952c3acb475182bfa246ff09ee35ce84e99f10a41c8f5f894c")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00')
sync_file_range(r1, 0x0, 0x0, 0x2)

05:21:32 executing program 2:
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000540)=0x6e)
sendto$unix(r0, &(0x7f0000000680)="688d799e7a1b3804e15b12192ba55eeee00d7e75b96c3095c806ed63b633ea1f287292870fb9fb1cb4bb702ddfcc6c0190c69db60a12be2c31e83ebf95f3806514ae70c6f08a3594516b4c4464e5e3084db4556c7d42019df9621937acdd6afa73b5f1b37c04b26070420361640c850f4b1424b6987dec896c", 0x79, 0x4000000, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresgid(r2, r2, r2)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x80000, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f00000001c0)=0x1e, 0x4)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:32 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000940)="cd74dd8c07021d424eca0ad2446a06d6425d89fd8967b6962102fb309ddb7848d1eaedca40f4f3a1058024fb01148559ba08b4da637d531afd04557ee18af30008563175fa76b7937cd70488e00411427d4fbdac68b9800fffba4c5e0f589e3162da425bcf967d2369061f2e1892a528a6a76ff17dc7351fb483831a45c57a1e9c5ba8ff11b763b33639cbd4125d6f3609243537e4931a68f26142ca3237b5f36e6e", 0x0}, 0xfffffffffffffda1)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$KDSETMODE(r8, 0x4b3a, 0x5)
fallocate(r2, 0x40, 0x3, 0xffb9)
write$P9_RLERROR(r6, &(0x7f0000000480)={0x1e, 0x7, 0xffffffffffffffff, {0x15, '\x01C--wla~\xbf\xb4(\xe7\xdeB\x1f\x1a\x92v?\xd90'}}, 0x1e)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ustat(0x6, &(0x7f0000000000))
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
clock_gettime(0x5, 0x0)

05:21:32 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7f, 0x9, 0xf4, 0x1000, 0x18, 0x5, 0x0, 0x10001, 0x3, 0x9, 0x3ff, 0x4})

05:21:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$read(0xb, r2, &(0x7f0000000340)=""/129, 0x81)
write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0)
mkdir(0x0, 0x3f)
write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18}, 0x18)
sendfile(r1, r1, &(0x7f0000000240), 0x7fff)
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080))

05:21:33 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r2, 0x110, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6e}}, ["", "", "", "", ""]}, 0x24}}, 0x20000001)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
r5 = open(&(0x7f0000000540)='./file0\x00', 0x500, 0x5)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={r5, &(0x7f0000000600)="bbfc89eecf7850e5d777411bf095167e5e9d4370d17cc64fb952f87b541b2ef4def5d324f3ad71affa4c37eae41e2e3b73c75f840b3e713493a2cfcf88ed74ac0bcb56bb9eb3b2132ef0188bacfa5400867a6ef1ec4eecf96474ea6279d407ad7a049f8b854b7f4fd54003b5a6222337a2364d562f1695be897ebb1de1b58912a2ee0f1f249a758b182297147687925990f3bc9b64193a2810cec9ae3c07574c34016ccacc8297d85434a8224f2b4465994f6a825f370ca13a2160533f", 0xfffffffffffffffe}, 0x18)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r3}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000440))
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:33 executing program 4:
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000540)=0x6e)
sendto$unix(r0, &(0x7f0000000680)="688d799e7a1b3804e15b12192ba55eeee00d7e75b96c3095c806ed63b633ea1f287292870fb9fb1cb4bb702ddfcc6c0190c69db60a12be2c31e83ebf95f3806514ae70c6f08a3594516b4c4464e5e3084db4556c7d42019df9621937acdd6afa73b5f1b37c04b26070420361640c850f4b1424b6987dec896c", 0x79, 0x4000000, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresgid(r2, r2, r2)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x80000, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f00000001c0)=0x1e, 0x4)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1085.057975] binder: BINDER_SET_CONTEXT_MGR already set
[ 1085.065429] binder: 12615:12624 ioctl 40046207 0 returned -16
[ 1085.093031] binder: 12615:12624 Release 1 refcount change on invalid ref 1 ret -22
[ 1085.148077] binder: BINDER_SET_CONTEXT_MGR already set
05:21:33 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
linkat(r0, &(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)
statx(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x4, &(0x7f0000000080))

05:21:33 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000480)="5fe81724e81b87aa31afd1bd6c995db12896689bf71f4d71f1c4da17618e7281d014019520a81065b929559b19a5527444b4e90d6cd8432e0a0985e70fb7c7147563a0bff4d046f4e2c6bfb8bdf787519d05edf57c", 0x55}, {&(0x7f00000007c0)="7bd286b107d46d0e65e5c0c01dd4ee478e123848447470848e7c9306d7c711de6763d6023b1cfc3afd025d63500009b12a3c66ebd54aa8b391f49bd99943563976177107fb9a227eda088a0b0b3087bed6bb732cb4f0297215e4978d6725d94fa93dde128d22384ce356d7f8621c86fee634e74678e70425831ab1f84cb1e32fe92f3e0c825cdb88bbb55166464b5babb1d510e8e9de81877af36bfb3f20bb6c92a7417a73d7e11e5bbd2847f2c804bc47bdf15859f3eb9de6d54fc7c1", 0xbd}, {&(0x7f0000000940)="34ed51cbffbd4af04ac37777781de1e4dd5fb18c2cca0b1444c1608f30f3813cfb2aea41ce7c93db0150815deaf9e0454c4c5750f1e2fb311a4ca6fe48f259adaa79e7c2b3ed9562cae5d6d7e347c06db11cd806d602d58293be9fc974f8376c9aa8103c9dc356fb778f84e9384cc2", 0x6f}], 0x3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:33 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/46, 0x2e)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x80000, 0x81, &(0x7f00000001c0))
syz_open_pts(0xffffffffffffffff, 0x0)
preadv(r0, 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e23, 0x6, @empty, 0x3}, {0xa, 0x4e24, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, 0x8c00000000000000, [0xfffffffffffffff7, 0x7, 0x7fff, 0x68, 0x5, 0x5, 0xfffffffffffffffb, 0x8001]}, 0x5c)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
r2 = creat(0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x400202, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
renameat2(r0, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1)
ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000))

[ 1085.170021] binder: 12615:12624 ioctl 40046207 0 returned -16
[ 1085.183288] binder: 12615:12645 Release 1 refcount change on invalid ref 1 ret -22
[ 1085.306302] binder: BINDER_SET_CONTEXT_MGR already set
[ 1085.318741] binder: 12655:12666 ioctl 40046207 0 returned -16
[ 1085.335934] binder: 12655:12666 Release 1 refcount change on invalid ref 1 ret -22
[ 1086.026994] binder: BINDER_SET_CONTEXT_MGR already set
[ 1086.032373] binder: 12668:12670 ioctl 40046207 0 returned -16
[ 1086.032693] binder: 12668:12671 Release 1 refcount change on invalid ref 1 ret -22
[ 1086.046606] binder: release 12655:12666 transaction 1437 out, still active
[ 1086.056391] binder: release 12668:12672 transaction 1440 out, still active
05:21:35 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "eb2cdbb4a807ad75afe5da0a9fdd3268"}, 0x11, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000140)={'ip6tnl0\x00', @ifru_ivalue})

05:21:35 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_lt={'uid<', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
timerfd_settime(0xffffffffffffffff, 0x200000, &(0x7f0000000000)={{r4, r5+10000000}, {0x77359400}}, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(r0, 0x30)
r8 = socket$netlink(0x10, 0x3, 0x10)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:35 executing program 5:
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:35 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005401})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x100000001, 0xff, 0x7fffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000007000007002565"], 0xb)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x64, r5, 0x704, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x80)

05:21:35 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x107, 0x6, 0x209e22, 0x8000000000003, 0x1}, 0xfffffffffffffec7)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000040), 0x0, 0x2}, 0x385)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000480)=0xe8)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r5 = dup(r4)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f00000006c0))
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe, 0x12, r3, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:36 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
fdatasync(r0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x8})
write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
pwritev(r0, &(0x7f0000002480)=[{&(0x7f00000000c0), 0x166}], 0x1, 0x0)

[ 1088.109624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pig=12698 comm=syz-executor0
[ 1088.122121] binder: BINDER_SET_CONTEXT_MGR already set
[ 1088.127571] binder: 12679:12699 ioctl 40046207 0 returned -16
[ 1088.143799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
05:21:36 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="961b7ba46df72a3c569e80dd8728992b57f3d82adb15f6d8ba0dea46a3ede957055e2054276c3ea00fc10fc5a43f7b5c5121b46e35e35ad16fb1", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1088.174722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
[ 1088.207169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
05:21:36 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
write$binfmt_elf64(r0, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0xfd, 0x8000, 0x9, 0x5, 0x6e6, 0x0, 0x7, 0x5c7, 0x4d, 0x40, 0x101, 0x101, 0x0, 0x38, 0x1, 0x6, 0x4, 0x3ff}, [{0x6474e557, 0x5, 0x5b2bb40d, 0x80000001, 0x1000, 0x800, 0x2, 0x80}], "0caea19f91dae938a70737066cffd36a5419d6a8494e5f1389c22e61294a8969", [[], [], [], [], [], [], []]}, 0x798)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1088.208995] binder: 12679:12708 BC_INCREFS_DONE node 1444 has no pending increfs request
[ 1088.225178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
[ 1088.253791] binder: 12679:12713 Release 1 refcount change on invalid ref 1 ret -22
[ 1088.276464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
[ 1088.279649] binder: binder_mmap: 12679 20000000-20003000 bad vm_flags failed -1
[ 1088.293473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
05:21:36 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x4007fd, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f00000000c0), 0x0)

05:21:36 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="0100efa9ec547ff743ebb6afe10f39505f995251960b38469a7913d62093d1e3b0afeff3f083f6235706dc3a08c8df48521b446172c0f22b0afb25effe8d83bb85ac3f97fedb1e605ddbfe4cc48d6476853f907bb91b2367115cc6c29ff97532b49628b19ec46769fefd6a773153a9f3f0cce5739cf2ee50908b83190c2498bfad96087a41b74ef776400b0e47a80ddd0fcaaa432191a0ea4bdfb39fbfa60e0f94d1ef247f63e4fe2fee51305061f38d0371f01974fb4b7820bb", @ANYRES16, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:36 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\fB\x00\x00'], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f0000000480)={0x0, @speck128})
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[ 1088.321868] binder: 12679:12699 ioctl c0306201 20000440 returned -14
[ 1088.321924] binder: 12679:12681 ioctl c0306201 20000140 returned -14
[ 1088.352137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
[ 1088.394908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
[ 1088.402551] binder: 12725:12726 unknown command 16908
[ 1088.424615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12698 comm=syz-executor0
[ 1088.425212] binder: 12725:12726 ioctl c0306201 20000140 returned -22
[ 1088.455104] binder: BINDER_SET_CONTEXT_MGR already set
[ 1088.465194] binder: 12725:12730 ioctl 40046207 0 returned -16
[ 1088.528134] binder: 12725:12730 BC_INCREFS_DONE node 1447 has no pending increfs request
[ 1088.536938] binder: 12725:12730 Release 1 refcount change on invalid ref 1 ret -22
[ 1088.547684] binder: 12725:12730 BC_ACQUIRE_DONE node 1447 has no pending acquire request
[ 1089.187052] binder: 12725:12743 unknown command 16908
[ 1089.187575] binder: BINDER_SET_CONTEXT_MGR already set
[ 1089.192737] binder: 12725:12743 ioctl c0306201 20000140 returned -22
[ 1089.198591] binder: 12725:12744 ioctl 40046207 0 returned -16
[ 1089.205740] binder: 12725:12745 Release 1 refcount change on invalid ref 1 ret -22
[ 1089.219778] binder: release 12725:12746 transaction 1449 out, still active
[ 1089.233369] binder: release 12725:12726 transaction 1446 out, still active
[ 1089.240512] binder: unexpected work type, 4, not freed
[ 1089.245894] binder: undelivered TRANSACTION_COMPLETE
05:21:39 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:39 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
gettid()

05:21:39 executing program 4:
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, 0xfffe, r0)
r1 = geteuid()
setresuid(r1, r1, r1)
setresuid(0x0, 0x0, 0x0)
setfsuid(r1)

05:21:39 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000000020000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x10, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r3=>0x0)
timer_delete(r3)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30)
write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0x23b)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200), 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0xa)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000240)={{0x0, 0x2, 0x7ff, 0x3, 0xfffffffeffffffff}, 0x4, 0x1ba, 'id1\x00', 'timer0\x00', 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x290})

05:21:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:39 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000480)={0x4, 0x33, 0xa, 0x10, 0x9, 0x6458, 0x2, 0xbb, 0x1})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:39 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@subj_user={'subj_user', 0x3d, 'smackfsfloor'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r3 = dup3(r0, r0, 0x80000)
setsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000600)="442f1a6f9b01473971aac7e1e1e937c006e0b81d686099a5cc86b61ccadc9f17c1daf1143817e9e992677a4ece8b9eb1d0e0876207211dd6884438f08e06b8dc1fd4a7c13a6daf77b8c6f3b10a60261ab9cda7e9ef051b20af5dbc4b9ad0aa821fce0d7d7cbe650ced73adfd984a8010c0667fc50ed73156e4dcc5e6aec6b496a932d8d0c6b81085b5aadc34595476ce913dfa7d6b460a", 0x97)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = getgid()
r2 = getegid()
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=<r3=>0x0)
setresgid(r1, r2, r3)

05:21:39 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xe739dd475bd60f41, 0x0)
pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="33ab03deb37dca2b116220b39169baae6a6d8f9a89c1d3fe8ffb90103a29cb9f8f9414047b6de35f03ce01f891e37fa3d5af782cff537150888f3f0d7c73e2a397d3d49e5121491288f8d05194398b682761", 0x52}, {&(0x7f0000000140)="b2d8133e346f5b3cc9824680ae1c326e95e75ee978f94aaaa6495e7c4c68a188a021c5ab9706806125a41c671d7c57073715dccdda73cbe341142243df11fa1a48d0ae9c3b3be51f9ab464333967c440ffc52698075ffe27fdc5b598815fc58794c9c82cfa056da97f7a4bd3631c7f920dc13a737ca65cf1388280ca855afd2b1326c4b703e8c91edc12118a0310b82c553bebb167aa2bd0dcb9780f729946290b4ed6f30f2751ba78e896232f93c1581d1898ddb84ee76a9d41cc7a20412f197fc41badd10566b29a58ef7def562fab2dde625d18479846ee00b0db7f339c2e269ab6a99d66f79f5aa2", 0xea}, {&(0x7f0000000240)="2776894b8017ff50248c8e0ec2c965e687082a52bb3185d7f8e09a91e768dbdfcc09d455680e05ae5bbcf963792586e2641bfe7ed082a518a92762deedc710aec445f00dc889b9ff198ca6bc7280913b5393039ef29b6bd257773af7a499e5ed1a9e85583851aba4765b1d1dff8268e1cd7ef5d312f671528037633ec79c6258f4a8efebfac61d0ac8b3165c8fda9e08d76ab3864f8d6ba384510cab9747457aa7a8770d447af0c5f9a84c566899ea46d88d88718b0b0b4962354865da455d6d684c5e33a82e72b89f74f9e3a0b6814f0a476a60cb8d47c393588747cfa92f3e", 0xe0}, {&(0x7f0000000340)="7960fab528ccc6c9c0f98866fac066a23d616f579f22771241a85570a42d7521adcd748c3c6e18448b17289ce5ee5e74b11ec70b6a4b209d8b60f57568c53a85f57dcd94a58a8a4a543f52d56b7956cba853f70a96bf95e6c40308b99ae6df88e1ded350a6113b0ae282c27689dbc399615e5118f90d95ff885f095365daa4b54cb07b933c23ebb0c660cbfb6f0804515e6c77861affb224a064803084133c14dd31fb6e6a9c2bdeac9c43e8cafa7c4810b0a65e248b2ad8bb79f6f81a5fdea2c8631c68df6e689220cddb265775c2f147bce0b52caa194200bb9cd3510a188d", 0xe0}, {&(0x7f0000000440)="136a4889330d1a72c7bc33efe027fbd529782549f4742e741a9dcf9d552b9a3e09ee1f84", 0x24}], 0x5, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0xc4})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

05:21:39 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x20000, 0x1a8)
r0 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0xa00, 0xc0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, r0, 0x0, 0x263, 0x0, 0xffffffffffffffff}, 0x28)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:39 executing program 0:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000300))
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000002c0)=0x8)
openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getpeername(r2, 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x0, 0x0)
fadvise64(r0, 0x20, 0xffffffffffffff7f, 0x4)
getpeername(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x80)
request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0xfffffffffffffffe)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0x3, 0x4)

05:21:39 executing program 4:
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigsuspend(&(0x7f0000000080), 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ioperm(0x0, 0x3c0, 0x7)
ptrace$setregs(0x49c1daa27e6023a8, r0, 0x6, &(0x7f0000000000)="12d701cbf253cbb9b8c70aeb57816f83c084b38e29912d223b572fa7467b8c49fc805a51b6bdde58db")
tkill(r0, 0x30)

05:21:39 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x802122001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000d40)={0x7, 0x10, 0x8000000000008})
write$selinux_load(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815000000000000000800000007000000402c0000000000002315c908e62da298"], 0x30)
setxattr$security_smack_entry(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1)
fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
fcntl$setstatus(r0, 0x4, 0xc00)
getpid()
r6 = creat(&(0x7f0000000080)='./bus\x00', 0xc1)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8)
stat(&(0x7f0000001ec0)='./bus\x00', &(0x7f0000001f00))
sendmsg$netlink(r6, &(0x7f0000002180)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000e00)={0x10, 0x37, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x1}, 0x20000000)
creat(&(0x7f0000000100)='./bus\x00', 0x100)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239)
request_key(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)='wlan0]\'\x00', 0xfffffffffffffffd)

05:21:39 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22, 0x100, @rand_addr="7a97ad7b8535be65d0f6b5a5cea71084"}, 0x1c)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1091.157913] binder: BINDER_SET_CONTEXT_MGR already set
[ 1091.170869] binder: 12753:12777 ioctl 40046207 0 returned -16
[ 1091.182635] binder: 12753:12777 Release 1 refcount change on invalid ref 1 ret -22
05:21:39 executing program 0:
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0xfdd6)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
tee(r0, r1, 0xfffffffffffff4ff, 0x0)

05:21:39 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x31)
write$binfmt_misc(r0, &(0x7f0000000340)={'syz1'}, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0)=0x74, 0x4)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[ 1091.864442] binder: BINDER_SET_CONTEXT_MGR already set
[ 1091.869879] binder: 12753:12792 ioctl 40046207 0 returned -16
[ 1091.870162] binder: 12753:12824 Release 1 refcount change on invalid ref 1 ret -22
[ 1091.885363] binder: release 12792:12824 transaction 1455 out, still active
[ 1091.900672] binder: release 12753:12777 transaction 1452 out, still active
05:21:42 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r1, @ANYBLOB="2c736d61636b7d737472616e736d7574020c2e2c7365636c6162656c2c736d61636b6673666c6f57723f7472757374656423216c6f626465762c002622db1bf83e465a28e8f8da67a85d3d2e6a597b0b29999f7ef9a86015f7fec716d677535a109cd6ce312f41d85e9ecc013ec713c07f8e8b08ef5f177fc401acbaa318b182965c3139d7fc40246e1e4716cc2d483a8c784f4bdeb8f355e926a8e76cd9d7c23289e8512cb8"])
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x400c000)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000003bc0)=""/4096, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x6cf8)
clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
r6 = getpid()
rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000100))
ptrace(0x10, r6)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
set_tid_address(0x0)
ptrace$pokeuser(0x6, r6, 0x388, 0xffffffffffffffff)

05:21:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x0, 0x300)
syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2001000004239ca4d0014000000880bb400002478ac141d0de0000001d06c6e68d49e11095bfef2776c0001000004010778504ffa50f6f434755965e5529968755d6c21016b1a5606000000000000002ab078de864cc2c3ee55c6ea5e1f9285d3963cb9"], 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x100, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x1, @mcast2, 0xffffffffffffffbb}, {0xa, 0x4e21, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xc}, 0x1000}, 0x7, [0xfffffffffffffff9, 0x824d, 0x1, 0xc7, 0x8, 0x2, 0x5, 0x8]}, 0x5c)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000300)={'team0\x00', 0x43})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000580)=0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000480)=0x1, 0x4)
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/keychord\x00', 0x40000000020087, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x4)
clone(0x70024100, &(0x7f00000001c0), 0x0, 0x0, 0x0)
clock_nanosleep(0x0, 0x1, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x806, 0x0)
ioctl(r3, 0xc1, &(0x7f00000004c0)="da7d4b86c2818b75c47f9771d213aedc1cf42145619d6d4f3d64117bf61b5127ad7af6959693156c7711fe75eabf00799280241f1e5aad27d1f3ba517f4aadabeadf5f1953569ed70cee0b91162c85a0e14e7b79821c0ba0b136b09e")
io_setup(0x4, &(0x7f0000000080)=<r5=>0x0)
io_getevents(r5, 0x8, 0x34e, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x1c9c380})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00eab914b275cc9b69250d000000180002000400040008000200400000000800020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c004)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x200)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000240), 0x14)

05:21:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_cache\x00')
accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x80000)
uname(&(0x7f0000000080)=""/28)
preadv(r0, &(0x7f0000000480), 0x1000000000000172, 0x0)

05:21:42 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:42 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
r7 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500), 0x1000000a3, 0x0, &(0x7f0000000680)})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})
ioctl$int_out(r7, 0x5460, &(0x7f0000000480))

05:21:42 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
r1 = dup(r0)
ioctl$RTC_WIE_OFF(r1, 0x7010)

05:21:42 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xc7)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_smack_entry(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)='security.SMACK64MMAP\x00', &(0x7f0000000640)='\x00', 0x1, 0x1)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'hsr0\x00', r1})
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:42 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="62699a7348f9089113c60c79c8babeaa"}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x4000001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0)
fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1)
pipe(&(0x7f0000000000))

[ 1094.177570] binder: BINDER_SET_CONTEXT_MGR already set
[ 1094.185222] binder: 12828:12849 ioctl 40046207 0 returned -16
05:21:42 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xcfe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

05:21:42 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
rt_sigqueueinfo(r2, 0x13, &(0x7f0000000680)={0x1e, 0x1, 0x2})
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r3}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x9, 0x2, 0x5, 0x2, 0x0, 0x7ff, 0x2, 0x0, 0x800, 0x8000, 0xab63, 0x7fff, 0x3, 0x8, 0x6, 0x2, 0x3ff, 0x1f, 0x5, 0x1ff, 0x7, 0x2, 0x3, 0x9, 0xcbd, 0x800, 0x7, 0xfff, 0xf0c, 0x7fffffff, 0x9, 0x5, 0x3, 0x8, 0x7, 0x5972, 0x0, 0xffff, 0x4, @perf_config_ext={0x80, 0x8}, 0x10042, 0x9, 0x3, 0x6, 0x2, 0x2}, r0, 0x3, r1, 0x2)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x101000, 0x0)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x0, 0x300)
syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2001000004239ca4d0014000000880bb400002478ac141d0de0000001d06c6e68d49e11095bfef2776c0001000004010778504ffa50f6f434755965e5529968755d6c21016b1a5606000000000000002ab078de864cc2c3ee55c6ea5e1f9285d3963cb9"], 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x100, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x1, @mcast2, 0xffffffffffffffbb}, {0xa, 0x4e21, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xc}, 0x1000}, 0x7, [0xfffffffffffffff9, 0x824d, 0x1, 0xc7, 0x8, 0x2, 0x5, 0x8]}, 0x5c)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000300)={'team0\x00', 0x43})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000580)=0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000480)=0x1, 0x4)
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/keychord\x00', 0x40000000020087, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x4)
clone(0x70024100, &(0x7f00000001c0), 0x0, 0x0, 0x0)
clock_nanosleep(0x0, 0x1, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x806, 0x0)
ioctl(r3, 0xc1, &(0x7f00000004c0)="da7d4b86c2818b75c47f9771d213aedc1cf42145619d6d4f3d64117bf61b5127ad7af6959693156c7711fe75eabf00799280241f1e5aad27d1f3ba517f4aadabeadf5f1953569ed70cee0b91162c85a0e14e7b79821c0ba0b136b09e")
io_setup(0x4, &(0x7f0000000080)=<r5=>0x0)
io_getevents(r5, 0x8, 0x34e, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x1c9c380})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00eab914b275cc9b69250d000000180002000400040008000200400000000800020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c004)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x200)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000240), 0x14)

05:21:42 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@audit='audit'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:42 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x5, 0x57, 0x8000000001, 0x2}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)

05:21:42 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xffffffffffffff8c, r3, 0x400, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000007e}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:42 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
recvfrom$inet(r0, &(0x7f0000000140)=""/186, 0xba, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1094.907781] binder: BINDER_SET_CONTEXT_MGR already set
[ 1094.913369] binder: 12828:12855 ioctl 40046207 0 returned -16
[ 1094.919978] binder: release 12828:12849 transaction 1458 out, still active
[ 1094.930498] binder: release 12855:12917 transaction 1461 out, still active
05:21:45 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c152bade7fb99d5eef7ca9ac9386d902ddea33513155657b051996033138e574d00fd051a051cd9a85301ebaa3dbf526dfde09d129750219c92ecd12332e7c5591386b2f4e253f3020e98537f9b866364adb4166b8a28d518d4a6942cdbb5eb1cb26b04273c4e079e2b07d7", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:45 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0xe)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3e})
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000002c0)={0x8, 0x2, 0xff, 0x99, "a7471990bf13b3d9fe8d87871a948878581a45c5536a5fd5fd1d2baab703933d"})
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0xe51, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x81f, r1, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80)

05:21:45 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="62699a7348f9089113c60c79c8babeaa"}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x4000001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0)
fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1)
pipe(&(0x7f0000000000))

05:21:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:45 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0xf04, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:45 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
clock_getres(0x0, &(0x7f0000000480))
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:45 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000700)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB="2c6f626a5f726f6c653d73656c6647504c6370757365747d76626f786e657431757365722d2c6d6561737572652c7569643e11507713ddcc410e32229054d6d0a5a5d7d49f522c2b1818358d5ff778938cb30b420216504b7a31a1eb2152eeb2a95025f2d316761b53b3a9bd97496a1cb29ffff64896830968f63016652bcc14c5b636f23d3a4e3eeb69dd853f9b2124adfdcf0cf58917513284bf75a78241056a1680", @ANYRESDEC=r1, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000680)="48000000cf68197f09004b0101048c40000000ffcf5d3400bc9240e10520613057ffd181b32ccc4f46e0209137a5b4809ec8d662ffbec7004bbf5b31b9b78f31b2ffa93d0699ef3b8c3cfe5f002821", 0x813b6bd1d648b616}], 0x1)

[ 1097.216932] binder: BINDER_SET_CONTEXT_MGR already set
[ 1097.224768] binder: 12925:12949 ioctl 40046207 0 returned -16
[ 1097.233222] binder: 12925:12949 Release 1 refcount change on invalid ref 1 ret -22
05:21:45 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0}, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000140))
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(r0, 0x1000000000000002)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="7c030000", @ANYRES16=r3, @ANYBLOB="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"], 0x37c}}, 0x8000)
r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000000)=""/99)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:45 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB="2c6f626a5f726f6c653d73656c6647504c632d2c6d64d33d2872252c7569643e", @ANYRESDEC=r1, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f0000000540)={<r6=>0x0, <r7=>0x0})
timerfd_settime(r2, 0x1, &(0x7f0000000700)={{r4, r5+10000000}, {r6, r7+10000000}}, &(0x7f0000000740))
r8 = socket$netlink(0x10, 0x3, 0x90535d73d69a9bf5)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7fffffff, 0x3a7, 0x0, 0x4, 0x9, 0x11, "749bc7341b7d4f2b47d065a99dc40c7e43891efb08bf221044923fbc7bacc886c15c15a5c81297c00f3c4a677b6f199822879f92c7a0830c29e7ad40c4c677e4", "b63f6c5402059b291223756b82e354143bd3eb4ee316c1f0193140d73817d07a4b2e6012a3c4e73af0d88479544bee7fa691abf419ce2e69b723f9da769e9866", "8d4a5837f97dbeddf5b4d3454112bbeaa2fcd4526ad12b65a2a2845654ea1f08", [0xbbd0, 0x3]})
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:45 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r3 = request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\x00', 0xfffffffffffffff8)
keyctl$read(0xb, r3, &(0x7f0000000880)=""/4096, 0x1000)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:45 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter6\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000500)='TRUE', 0x4, 0x2)
ioctl(r0, 0x44a, &(0x7f0000000040)="00000000000096")
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
getresuid(&(0x7f0000000340), &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000580))
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast1, @in=@rand_addr=0x2, 0x4e21, 0x7, 0x4e21, 0x2, 0xa, 0xa0, 0x20, 0xaf, 0x0, r2}, {0x9, 0x3ff, 0x4, 0x0, 0x1, 0x6, 0x24f145ba, 0x606a366a}, {0x5, 0x7, 0x7ff, 0xd8d}, 0x1, 0x6e6bbf, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0xff}, 0xa, @in6=@rand_addr="53ceb8675400c1cbd48a0d75b7ac38d4", 0x0, 0x2, 0x2, 0x100000001, 0x0, 0x7, 0x3}}, 0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8)
getresgid(&(0x7f0000000240), &(0x7f00000004c0), &(0x7f00000002c0)=<r4=>0x0)
getgroups(0x1, &(0x7f0000000300)=[<r5=>0x0])
getgroups(0x0, &(0x7f0000000340))
r6 = getegid()
stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=r3, @ANYBLOB="040001000000000008000100", @ANYRES32=r4, @ANYBLOB="08000104", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="1000050000fe000020002a20000000a4"], 0x54, 0x1)
getpeername$inet(r0, &(0x7f0000000740), &(0x7f0000000780)=0x10)
renameat(r0, &(0x7f00000006c0)='./file0\x00', r0, &(0x7f0000000700)='./file1\x00')

05:21:45 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
r4 = dup2(r0, r0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x4, 0x2, 0x20, 0x80, 0x0, r2, r3}, {0x5, 0x2, 0x2, 0x5, 0x5, 0x6, 0x7, 0x2}, {0x2366, 0x20, 0x2, 0x2}, 0x0, 0x6e6bb7, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d4, 0x7c}, 0xa, @in6=@empty, 0x3500, 0x4, 0x3, 0x6, 0x400, 0x81f, 0x4}}, 0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=0000000000000000,mode=00000000000000000000002,mode=00000000000000000000010,fAowner<', @ANYRESDEC=r1, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r3, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
lseek(r0, 0x0, 0x2)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
write$UHID_INPUT(r4, &(0x7f0000000880)={0x8, "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", 0x1000}, 0x1006)
tkill(0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:45 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
eventfd2(0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000440)=""/230, 0xe6}], 0x7, 0x0)

[ 1097.937358] binder: BINDER_SET_CONTEXT_MGR already set
[ 1097.938932] binder: 12954:12996 BC_INCREFS_DONE u0000000000000000 no match
[ 1097.943581] binder: 12954:12994 ioctl 40046207 0 returned -16
[ 1097.950490] binder: 12954:12995 Release 1 refcount change on invalid ref 1 ret -22
[ 1097.963981] binder: release 12954:12995 transaction 1467 out, still active
[ 1097.971592] binder: release 12925:12949 transaction 1464 out, still active
05:21:48 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:48 executing program 4:
r0 = gettid()
clone(0x4000, &(0x7f0000000140)="36337fc3c54705efe94fb0710c0a466ade11e6d32d62648327d027a09efcae7e9aae9e00c5f9c7005a7cf34a2d85244948a398c93df3afcb0510c74ccc11303f58afc1bfcdf527c3ee9c024f332aab93953e4c40af56b0e03dfa570906b1cdb75c85b44e93db8f63e14f48cac22025eadfd56830ccffe19041508c64cbef6b93377cf9125fa0dfb999", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="22f04adc2371f648")
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x4, 0x80000000, 0x80, 0x7ff, 0x0, 0xbb23, 0x8400, 0x3, 0x6, 0x33a, 0x10000, 0x1000000, 0x2, 0x7f, 0xc289, 0x3, 0x6, 0x0, 0x640, 0x3, 0x4, 0x9, 0x7, 0x3c7, 0x7, 0x7fffffff, 0x100, 0x5, 0x6, 0x2, 0xffffffffffffff80, 0x9, 0x6, 0x219, 0x4, 0x6, 0x0, 0x100000000, 0x0, @perf_config_ext={0xffffffffffffff80}, 0x4, 0xff, 0x8, 0x8, 0x20, 0x4, 0x9}, 0x0, 0x1, r1, 0x0)
tkill(r0, 0x4041b)
rt_tgsigqueueinfo(r0, r0, 0x1b, &(0x7f00000000c0)={0xc, 0x6, 0x8})

05:21:48 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:48 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc, 0x2, @empty=[0xf0ffffff]}]}, 0x28}}, 0x0)

05:21:48 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000480))
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:48 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x200008013)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:48 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
fstat(r0, &(0x7f0000000680))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00000038325d8d7f943241498ae03f1a98c37aa854d2028f27a7258de6595a54626e08cb9def844e58e5ec6c7af884450d106adba593229f49d7854a8003944bd501757b474b4462b835b6ee2c23fcee0868893418f0eb10b7f65cbc329f2b4c49a914ec957f68c8d6a618f129a06eb789253ad209f5b975b31ac214f3a260efefa7c4490d9857c49bbaf61a0285956d98ccccf7482382fa962a4c531bbd37ca9bde5fe1ac2fd8fcfc81e4dc883c7d419a90ae45f8fa7e182fcc886aa3639ea5748720947316c6c0804a5e907f05ba6d312dda", @ANYRES16=r4, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
mount(&(0x7f0000000440)=@filename='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000600)='vxfs\x00', 0x2000000, &(0x7f0000000640)='-GPLppp1vboxnet1\x00')
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:48 executing program 4:
r0 = socket(0x400000011, 0x100004000000002, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
prlimit64(0x0, 0x6, &(0x7f0000000100), 0x0)
setresuid(r1, 0x0, 0x0)
execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

05:21:48 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:21:48 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x10400, 0x0)
r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000600)={0x2, 0x0, @initdev}, &(0x7f0000000640)=0x10, 0x80000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xffffffffffffff09)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1100.185021] PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex
05:21:48 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
wait4(r0, 0x0, 0x8, &(0x7f0000000200))
wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000140))
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0x15b, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:48 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0/bus\x00', 0x30)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
rename(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000200)='./file0/bus\x00')

[ 1100.263217] binder: BINDER_SET_CONTEXT_MGR already set
[ 1100.269016] binder: 13015:13038 ioctl 40046207 0 returned -16
[ 1100.280122] binder: 13015:13038 Release 1 refcount change on invalid ref 1 ret -22
05:21:48 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB="2c6f626a5f726f6c653d2f656c6647504c6370016165747d76758565726dc4891d9a5c38e2eda3656173957265b80000", @ANYRESDEC=r1, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:48 executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x1}, 0x8, 0x800)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000700)={0x8001, 0x2, 0x7, 0x8000, 0xa, [{0x2, 0x1ff, 0xfff, 0x0, 0x0, 0x800}, {0x4, 0x101, 0x85, 0x0, 0x0, 0x101}, {0x6, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x402}, {0x24d159c, 0x3, 0x4fe, 0x0, 0x0, 0x4}, {0x2, 0x9, 0x81, 0x0, 0x0, 0x1}, {0x0, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x81}, {0x1f, 0x0, 0x1, 0x0, 0x0, 0x1007}, {0x1, 0x5, 0x3, 0x0, 0x0, 0x102}, {0x0, 0x3f, 0x9609, 0x0, 0x0, 0x84}, {0x9, 0x5, 0x29}]})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000540)="62063eedea83d0f3460bbc175936002f31c47fad8806f2b0f591793227e1197ae5cf15214ee3b0e60636ff11961eb03cc286aa4aada44a0ff24c0c77b428d337fb80d20c5b11403e429a8fe3e38ba3a3d39cde344bb13d02ad7718390cf1ad0b6ebe72963280ed71d51fa1f153dab748feb003fbaa228059dad09d5647a5c39ab883f8ee7951a760c38b456a170cbcd39efca3de3befb25d13418eb7e38d76c8b6c8c4b385cc7f73f44fc2a9f1a25e3830cbe5af8593acde4bd59ed4331894effec0f527ab33172eb9a98f58c772aa3bc6276a046aa3391f954d32c295b56d9a3f98b62f4601015ffaef0451f1e9f8ea64537d2a1f0d2cabac", 0xf9}, {&(0x7f0000000180)="507f0044cd8fa941c0453d6fc80dd8d669d13f194fa175be841cc734399d0d6ce6faed219a2113993980f856cc1bad87320ce509e8f3b2dd68e20088390f970f707e4a162f9affaaaad6062a2a96670ef693f652fd91501117fbeceb255cd5993a5cb9d4e51d3fcbc5ab73053a9871be6c03201ac8cc39be2253a8548daa08ea6c430b417e3230c6c1f1276f422a800f6351eb2d79ca6acb1bdcb52a8894b3e50813ba3a6d4d9aa3a435b7b3b78f34d8e569b2bf1159618df1797c4a7805170e7502d29e91e08ca47d7aba6fcce8d7ee075ec428843c0d35", 0xd8}, {&(0x7f0000000280)="f76bb300985f793f62974cdcb99846329c01e595fd84b6da577a1500e7fb45e392a14b7c691de1548c22e14d908abfede54588c2bb25585ce38fa9b31b3808aeef2dd3d6450a3e0dce5f59980dbf492a02debc351a92726508464071a99ef9d523f1fc9af6a64a181850a18bc043a5f0408815242a0472f1daf33319bec39abf7bbd1e391097fd8c58583b7f3a94e7ef33f7e1732fcf3b8cea9964cac7d2b85b6896b4ca999f857d06e9deee88a2d239af8b8cbc9f081d80cdc7287cdd6b0b011abc4fa134373689e7ad4cd6c6dc5c1bf8c518789771abb78dd74c81e655e138642ad0c9", 0xe4}, {&(0x7f0000000380)="74207e83f0930edeea51691af66ae82d4bd14e94db37c6fed3953f6a3f1e93cbf97dac7c2b86877e62a883b01d18a41b4cdd5e3a2a18a94ba346dd8f9c788afa7e91203ec885b37bb9d7e264f46d0b7b1984570790d223369d38bbe35cf6d4b9485aa384d15e4e4f376799bd2c9eb7b57ad4f6ca5d03b1f968c050107ecbd0ff0da4a1fc6fb7aba059cf13f54d8bdf9f347d6c", 0x93}], 0x4)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x40)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)

[ 1100.362019] selinux_nlmsg_perm: 7 callbacks suppressed
[ 1100.362029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33770 sclass=netlink_route_socket pig=13057 comm=syz-executor4
[ 1100.386810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13057 comm=syz-executor4
[ 1100.400874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33770 sclass=netlink_route_socket pig=13057 comm=syz-executor4
[ 1100.424817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13057 comm=syz-executor4
[ 1100.997630] binder: BINDER_SET_CONTEXT_MGR already set
[ 1101.000123] binder: 13042:13070 BC_INCREFS_DONE u0000000000000000 no match
[ 1101.004074] binder: 13042:13068 ioctl 40046207 0 returned -16
[ 1101.010745] binder: 13042:13069 Release 1 refcount change on invalid ref 1 ret -22
[ 1101.024973] binder: release 13015:13038 transaction 1470 out, still active
[ 1101.040341] binder: release 13042:13069 transaction 1473 out, still active
05:21:51 executing program 4:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4f21, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x9cab, 0x0, 0x0, 0x0, 0x5442, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400, 0x0)
getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
clone(0x200a0140100, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x3, r0, 0x8)
ptrace$setopts(0x4206, r0, 0x80, 0x2)
tkill(r0, 0x11)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

05:21:51 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:51 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/mls\x00', 0x0, 0x0)
fchownat(r4, &(0x7f0000000540)='./file0\x00', r0, r1, 0x1400)
setxattr$security_ima(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000880)='security.ima\x00', &(0x7f00000008c0)=@md5={0x1, "4d47f2f722aefede02779fce5dd8beea"}, 0x11, 0x1)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40284, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040e2cbd7000fbdbdf25010000000000000007410000004c0018000000006962000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008841}, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
fstat(r5, &(0x7f0000000900))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000780))
fcntl$addseals(r3, 0x409, 0x1)
tkill(0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:51 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:51 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:21:51 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@nat={'nat\x00', 0x1b, 0x5, 0x5a8, 0x378, 0x378, 0x0, 0x110, 0x0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x5, &(0x7f0000000480), {[{{@uncond, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv6=@rand_addr="1e3069f932ecdb40d178af483611a602", @icmp_id=0x65, @gre_key=0x3}}}, {{@ipv6={@rand_addr="67f72585b3f2c1581a803112a675cb39", @rand_addr="eba2c1c819e86cd3d16000f2be0bea48", [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'rose0\x00', {0xff}, {}, 0x3f, 0x8, 0x6}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x1f, 0x1, 0x1, [0xa, 0x40, 0x3d, 0x66, 0x101, 0x8d3, 0x0, 0x800, 0xfcb, 0x0, 0x1, 0x4, 0x90a, 0x7, 0x50c, 0x2], 0xf}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xc, @ipv4=@rand_addr=0x3, @ipv4=@remote, @gre_key=0x729, @port=0x4e23}}}, {{@uncond, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xe, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@broadcast, @icmp_id=0x67, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x3, 0x81, 0x1}}, @common=@eui64={0x28, 'eui64\x00'}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@broadcast, @ipv6=@remote, @gre_key=0x8, @gre_key=0xffffffff00000001}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:51 executing program 4:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4f21, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x9cab, 0x0, 0x0, 0x0, 0x5442, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400, 0x0)
getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
clone(0x200a0140100, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x3, r0, 0x8)
ptrace$setopts(0x4206, r0, 0x80, 0x2)
tkill(r0, 0x11)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

05:21:51 executing program 4:
sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000"], 0x14}}], 0x1, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000007e00), 0x75, 0x0)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xff, 0x2, 0x9e9f, "c2374027c2daca5338b1fba664d4764c", "2c41ec2a73f9425e98fd003b77c6822797e6b565155e0ffc6ae685b8825fef8b818d09f4107a81a735cd161a7ecb3a7b07fd1a1a8af588fd93b45bc49b4193958db2b542ae0b63d1efe0d933679fd634013d56ed01f572a919817d3b09aed3302b6e4ef8d1887657b09857ce97c5595c8a98cbfc758a3f8c16ccad3181b0bafb8f4ef1dacd437121f33f4aa621c6ff7827b60d14b4c162c6dbb24a27e933d732ac863f9324e1a2e53061b4dd2bfcc6a61039df57b94ec4f8bcdf6180dfa31d0b9feeeabf8909b467c032527f97441ff470fc96f8c2c4bad4971cc29349f154eefa90cc627da151361250"}, 0xff, 0x2)

05:21:51 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x100, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000600)={[], 0x5, 0x9, 0x0, 0xffffffffffffffff, 0x5, r0})
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:51 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='vcan0\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1103.283970] binder: BINDER_SET_CONTEXT_MGR already set
[ 1103.289927] binder: 13075:13108 ioctl 40046207 0 returned -16
[ 1103.299578] binder: 13075:13108 Release 1 refcount change on invalid ref 1 ret -22
05:21:51 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in=@multicast2}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x26)
getuid()
ptrace$cont(0x17, r2, 0x8000, 0x401)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x8, 0x0, 0x0, 0x3})
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
openat$cgroup_subtree(r1, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
ptrace$cont(0x1f, r2, 0x0, 0x0)

[ 1103.327772] binder: 13075:13108 unknown command 0
[ 1103.333910] binder: 13075:13108 ioctl c0306201 200003c0 returned -22
05:21:51 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000600)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030322c6d6f64653d303030300e3030303030303030303030303030303031302c666f776e65723cff08123d89cab40e7fb893514f87f468924a78e7d2a3b8267aaca57d4256c5a052995ca803ff075e19959cd305836698198c059c1f40e302860801390cdb12f294d75beaffec054ee7", @ANYRESDEC=r0, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r1, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:51 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:51 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
socket$inet(0x2, 0x800, 0x4)
r1 = dup(r0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, <r2=>0x0}, &(0x7f00000006c0)=0xffffffffffffffeb)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000880)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r2, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r3, @ANYBLOB="6e736d7574653d2e2c7365636c6162656c2c736d61636b6673666c6f6f723d7472757374656423216c6f626465762c0049a628e52c4121501cf99f8282a5d594f39be13a633e152049d256a2ef66943d5af0666ba2f2b9c4f707cb79ad38d965f39dbcab61c0c977d8b35fef9a14178401a8ceb0eeeaf74b5e677b10912e150c812a373bbe41d4ebecc6103494fab826f776d19b6547da6e542a596f10cc88abdb0d42e125009aa4f9bea2e97db29ad706662cdf8bd758483e24a11997e57fbfafc2a5ec90c3b530227ae2c30bb7278dc50f7bef7463d58876b3aafe17a997c1b9f513bfdbbc935c8a436ae39d87accc2d97395542cddeafc95570e37fb6f7aed4f70f15f5568507b17658f9474998eb6a953a63994ed385f7e264ba2cfc5bad35cc74403a650be7778d0fd126863d0903447c7822616c924a092b22832199ad839c32b77414200945dcef56c33972a4d54d5542b6498bc128acd09d4a9b52306ad61d9fb85cfe64ab1acd5e4dcc3ec3bfce"])
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, r1, 0xe, 0x3}, 0x10)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="0500ff00f7b704f930a60c78ae52415acd248ddef9d0d1eb73577c018fbd26665646f4c2244a92da0257bae8b0f2914e0760a7a6c3659a167fed4b3bfdd9a41b2554a070ae49c7255953e92cb84cedacf1db69ffe66e1d3a7f101f4b275a3c3ea2a003835689024f4d47eead86b59af04371dd7673fa24996421d7ee63d216d6ecd2fe5770522a49464621bcc8f4158323bb307be642254cbdc2a52bf51d7a33a78324ddf32228420c024e0150520fc5fa89de13da9627616c738fd090e5594eaad4efb1fb5fb9b2012e0fc0dfba43fbcb2a", @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:51 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffffffffffff6b)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x3, 0x70, 0x2, 0x92, 0x2, 0x5, 0x0, 0x6, 0x200, 0x4, 0x0, 0xdc, 0x0, 0x0, 0x1000, 0x9, 0x7, 0x80000001, 0x6, 0x8, 0x6, 0x8, 0x100000001, 0x400, 0x80000001, 0x3, 0xffff, 0x80000000, 0x20, 0x8001, 0x40ec, 0x1, 0xffff, 0x3ff, 0x2, 0x800, 0x2, 0x1ff, 0x0, 0x11e, 0x0, @perf_config_ext={0x4, 0x6dc8}, 0x35000, 0xfffffffffffffffe, 0x5653, 0x9, 0x5, 0x2, 0xdc})
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x0, 0x7fff, 0x1f, 0xfffffffffffffffa, 0x6, 0x400})
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1104.005770] binder: BINDER_SET_CONTEXT_MGR already set
[ 1104.011579] binder: 13075:13108 ioctl 40046207 0 returned -16
[ 1104.011825] binder: 13075:13165 Release 1 refcount change on invalid ref 1 ret -22
[ 1104.029864] binder: 13075:13165 unknown command 0
[ 1104.035148] binder: 13075:13165 ioctl c0306201 200003c0 returned -22
[ 1104.042849] binder: release 13075:13165 transaction 1479 out, still active
[ 1104.049977] binder: release 13075:13108 transaction 1476 out, still active
05:21:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:54 executing program 2:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x2000, 0x0)
ioctl$VT_WAITACTIVE(r0, 0x5607)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4f, 0x0, 0xffffffffffffffff}, 0x17)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r3, @ANYBLOB="2c6f626a5f736f6c653d73656c47504c6370757385ec10a0626f786e65afe7b54d6c7422e26d6561737572652c7569643e00", @ANYRESDEC=r5, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1cfbff00", @ANYRES16=r7, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000600)=0x9)
tkill(0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
setpgid(r2, r1)
timerfd_gettime(r6, &(0x7f0000000440))

05:21:54 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:21:54 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x202180, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000280)={0x5c, 0x7d, 0x1, {0x0, 0x55, 0x3, 0xc2, {0x5, 0x3, 0x3}, 0x900000, 0x8, 0x8000, 0x6, 0xc, '\'wlan1vmnet1', 0xb, 'wlan1-\x8eeth0', 0x4, 'udp\x00', 0x7, 'TIPCv2\x00'}}, 0x5c)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xb4, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfde8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9a0}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa774}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x746}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x687c9fd0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:54 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:54 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
readlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)=""/36, 0x24)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:54 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = accept$packet(r0, 0x0, &(0x7f0000000440))
ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000540)={'irlan0\x00', 0x4bbc})
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:54 executing program 4:
r0 = eventfd(0x5)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/223, 0xdf}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00')
readv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/170, 0xaa}, {&(0x7f0000001140)=""/7, 0x7}, {&(0x7f0000001180)=""/61, 0x3d}], 0x3)

05:21:54 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/relabel\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x0, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:54 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0)

[ 1106.321859] binder: BINDER_SET_CONTEXT_MGR already set
[ 1106.327311] binder: 13172:13196 ioctl 40046207 0 returned -16
[ 1106.335199] binder: 13172:13196 unknown command 0
[ 1106.341795] binder: 13172:13196 ioctl c0306201 200001c0 returned -22
05:21:54 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:54 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x19f)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x2ce, 0x80800)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1107.040893] binder: BINDER_SET_CONTEXT_MGR already set
[ 1107.046501] binder: 13198:13198 ioctl 40046207 0 returned -16
[ 1107.046716] binder: 13198:13229 unknown command 0
[ 1107.057302] binder: 13198:13229 ioctl c0306201 200001c0 returned -22
[ 1107.065625] binder: release 13172:13196 transaction 1482 out, still active
[ 1107.074569] binder: release 13198:13229 transaction 1485 out, still active
05:21:57 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, "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", 0x1000}, 0x1006)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syncfs(r0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100))
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x8a0}, 0x28, 0x1)
setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)

05:21:57 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_GET_KEEPCAPS(0x7)
delete_module(&(0x7f0000001b00)='\xa1md5summime_type\x00', 0xa00)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000540)={{0x0, 0x1c9c380}}, 0x0)
socketpair(0x5, 0x80000, 0x5, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00')
recvmmsg(r2, &(0x7f00000042c0)=[{{&(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)=""/36, 0x24}, {&(0x7f0000000cc0)=""/94, 0x5e}, {&(0x7f0000000d40)=""/200, 0xc8}, {&(0x7f0000000e40)=""/116, 0x74}], 0x5, &(0x7f0000000f40)=""/63, 0x3f}, 0x5}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)=""/112, 0x70}, {&(0x7f0000001080)=""/36, 0x24}], 0x2}, 0x5}, {{&(0x7f0000001100)=@ax25={{}, [@null, @bcast, @bcast, @bcast, @netrom, @default, @netrom, @bcast]}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001180)=""/157, 0x9d}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f00000012c0)=""/176, 0xb0}, {&(0x7f0000001380)=""/37, 0x25}, {&(0x7f00000013c0)=""/81, 0x51}, {&(0x7f0000001440)=""/107, 0x6b}, {&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/134, 0x86}], 0x8}, 0x6865}, {{&(0x7f0000001680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001700)=""/92, 0x5c}, {&(0x7f0000001780)=""/235, 0xeb}, {&(0x7f0000001880)=""/46, 0x2e}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000001980)=""/97, 0x61}, {&(0x7f0000001a00)=""/213, 0xd5}, {&(0x7f0000001b00)}], 0x7, &(0x7f0000001bc0)=""/42, 0x2a}, 0x3}, {{&(0x7f0000001c00)=@ipx, 0x80, &(0x7f0000004200)=[{&(0x7f0000001c80)=""/250, 0xfa}, {&(0x7f0000001d80)=""/181, 0xb5}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001e80)=""/225, 0xe1}, {&(0x7f0000001f80)=""/12, 0xc}, {&(0x7f0000001fc0)=""/164, 0xa4}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/78, 0x4e}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/234, 0xea}], 0xa}, 0x2}], 0x5, 0x1, &(0x7f0000004400)={0x77359400})
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0x33c, r4, 0x101, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x188, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3bc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3262}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41bc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3145}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe883}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3cf3}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x902}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x80}, 0x2404c885)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="7a7687408a2f54374f81751d2675980e98cd5bb1d0bb6be5720500000000000000417e5ae91736982c32e85df9a3a884af51c4fca87a77794042f6f0d29e45eefd57d547b59f43d208313b2d030e64996af6181632332dc4b6e50a4e3eba4ed977418b182cd96a8feb2b6786367fe688c68037e2b1c9d80e3f208f3a5ef645bda1d89d099c73e9f6d5443f67c9bd64edbf9af8ae2cc0363670f500157b5ca70284607d7b4c4e7de25d62f51fa36f1236f14af63b8c9ea28ae600000000000000000000", @ANYRES16=r6, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/attr/current\x00', 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x2)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:21:57 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0xfffffffffffffffd, 0x80000000, "6bacc7961c691856"}})
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/116)
setresuid(r0, r0, r0)

05:21:57 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:21:57 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x18080000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@ipv6_newroute={0x2c, 0x18, 0x300, 0x70bd28, 0x25dfdbfd, {0xa, 0x14, 0x20, 0x0, 0xff, 0x4, 0xff, 0x5, 0xd00}, [@RTA_MARK={0x8, 0x10, 0x49f}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x91)
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:21:57 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
ppoll(&(0x7f0000000440)=[{r0, 0x1002}, {r0, 0x400}], 0x2, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f0000000600)={0x200}, 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:57 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lsetxattr$security_smack_entry(&(0x7f0000000680)='./file0\x00', &(0x7f0000000780)='security.SMACK64\x00', &(0x7f00000007c0)='\x00', 0x1, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x4027c, 0x0)
getresuid(&(0x7f0000000540), &(0x7f0000000600), &(0x7f0000000640))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000011b000c9a25316ef8439a6eb0cf09dc72e1e0b589b92cd25f6bcd3ad43942e6b4f4599d64a8161ff83584b8bbd9e42f7a144464882d9631ee2fb7", @ANYRES16=r4, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200ba7e015d793250433aa20c40b8901803b0a0fe6ecfe5bdf0f294963cd9828107836fcd7bc25e31e5f24e4a9e73d41d3187f9b6b70b6912f506086b909159659bebd70c"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
ioctl$VT_WAITACTIVE(r3, 0x5607)
tkill(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={<r5=>r0, r3, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30)
ptrace$cont(0x9, r5, 0x44b, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:57 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = getpgrp(0x0)
sched_rr_get_interval(r1, &(0x7f0000000000))
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000004000), &(0x7f0000000040)=0x4)

[ 1109.351768] binder: BINDER_SET_CONTEXT_MGR already set
05:21:57 executing program 2:
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x200000, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
rt_sigprocmask(0x1, &(0x7f0000000540)={0x1}, &(0x7f0000000600), 0x8)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:57 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
lremovexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000600)=@random={'security.', '@\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010425bd7000ffdbdf25080008000600040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4800008}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x100}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000004)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
write$P9_RFLUSH(r2, &(0x7f0000000640)={0x7, 0x6d, 0x1}, 0x7)

[ 1109.373021] binder: 13236:13261 ioctl 40046207 0 returned -16
[ 1109.380497] binder: 13236:13261 Release 1 refcount change on invalid ref 1 ret -22
05:21:57 executing program 4:
r0 = socket$inet6(0xa, 0x7, 0xbe03)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1c}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
recvfrom$inet6(r0, &(0x7f0000000040)=""/129, 0x81, 0x20, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @local, 0xa9}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="b4", 0x1, 0x0, 0x0, 0x0)

05:21:57 executing program 5:
r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='TIPCv2\x00', 0xfffffffffffffffb)
keyctl$instantiate(0xc, r0, &(0x7f0000000140)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '', 0x20, 0x9}, 0x2b, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:21:57 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7c}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1110.066300] binder: BINDER_SET_CONTEXT_MGR already set
[ 1110.067618] binder: 13268:13300 BC_INCREFS_DONE u0000000000000000 no match
[ 1110.071988] binder: 13236:13268 ioctl 40046207 0 returned -16
[ 1110.079979] binder: 13236:13300 Release 1 refcount change on invalid ref 1 ret -22
[ 1110.092839] binder: release 13236:13261 transaction 1488 out, still active
[ 1110.100856] binder: release 13268:13299 transaction 1491 out, still active
05:22:00 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:00 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000000340)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})

05:22:00 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:00 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x100000000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x11)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:00 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))

05:22:00 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f00000007c0)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780)={<r6=>0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r7 = dup(r5)
shutdown(r7, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x12, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB="852a6273000000002e0cb854af178ae474bb8f131a8248d371a94aafa45fce74dc3b3c34891348c0b580803e66b842f8aaddf3fb690d22bf2fb060069ca6ed955353349d572f058d44c81a37ec4bd81ac97c4716a2c263209e2028cddbcb8c21f6c9abb8f50ca754d75605afcf291df53295b10daff38c3608cedf346fa6c8537c5dbfea785000d84c1a2e6eef5061e384a74dc36d1eb39190afee2af6529eba1416", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000200)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="066304fce979ccd0afe761486140f6ebffff3d644bbfbbf318183a75f7"], 0x0, 0x0, &(0x7f0000000680)})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x1, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000640)=0x1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xfffffe3f, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="03430840", @ANYRES64=r6], 0x17, 0x0, &(0x7f0000000480)="9a7c2a253da12d230d161dc8ffaeb92283cfe2148ad876"})

05:22:00 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x100, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1112.312145] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev bpf, type bpf) errno=-22
[ 1112.342555] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev bpf, type bpf) errno=-22
05:22:00 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffc1f)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffff9c, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=""/75, 0x4b, <r0=>0x0}}, 0x10)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x250)
finit_module(r1, &(0x7f0000000040)='\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00')
readlinkat(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/11, 0xb)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
geteuid()
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a6d}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x56}]}]}, 0xa4}}, 0x20000001)
prctl$PR_GET_CHILD_SUBREAPER(0x25)

05:22:00 executing program 4:
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
r0 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e21, @rand_addr=0x7ff}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000020c0)=0x95, 0x4)

05:22:00 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xfffffffffffffff0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000680)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r1, @ANYBLOB="2c736d61636b66737472616e736d7574653d2e2c7365636c6162656c2c736d61636b6673666c6f6f723d7472757374656423216c6f626465762c00cc1e51e61c55d2a7bb40b9c6982944fbf5322927987227c5dea79c2d10f83ce04007dd34e6b7baf683fa49248eda1b80543939ba31a62991d55e14e97b2f43dc96856ed4e6ca73c7b98f9bb6cfb6758ba1f1bce236df34c66c1438f2cbd2a88f61cb7ea4e585207a0bca424ac68ecb0f88"])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000340)=0x5, 0x4)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000640)={0x31, 0x1a, 0x13, 0x9, 0x8, 0x9, 0x6, 0x154, 0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1112.363256] binder: BINDER_SET_CONTEXT_MGR already set
[ 1112.372909] binder: 13305:13330 ioctl 40046207 0 returned -16
[ 1112.396469] binder: 13305:13330 unknown command 155254783
[ 1112.406676] binder: 13305:13330 ioctl c0306201 20000440 returned -22
05:22:00 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
close(r0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xfffffffffffffec6, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[]}, 0x1, 0x0, 0x0, 0x82}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000440))
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:00 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x8, 0x1, 0x293}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000280)='net/ip_vs\x00\x19\t\v\xf53\x82\x9c^\xe1/\x9a\x85;C\xe7\xf3\xfc\xd2k]\xd3*\xb9lSq\xc7u\x9f\xe6h1\x80\x85K\xc0\x01r\xe0\xd5\x82P\xd4\x9a\xda\x80\xf6\x8c\x87W\xdf\xbe\x12\xad\x1cl\n\x1b\xe4\xc1k\x1f>8?\xd9U\x9af\xc7\"\xf2a\x8aV\xdf=\x9b+q\x9d\x88\"\xa5\x97\xda<Id5\x8f#\x83@\xdenE\xa0\xc0[^\xb7\x14,-tp\xaf\x9d+{\xe0\xf8\xf0\a\xfd\xa2s\xc4|\x85K\x86}\x18\xae\xabQ\t<\xc8\xdf\x83/\x04\xbf\x97yu\x97=\vA\xe5\xbf~\x03D\xdbJ-\x11\xfb\xcb\xb3\xa3\xb7\x98f\xb2\xe5H\x91~\v\x13\x9c@y\xf04\x87\x1a\xe3\xfc\xa9\xba\xadW\xe1\xd3\xcf7\x95\x80\x92\xfa\b\xc4\xca$\x97')
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400206)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fcntl$dupfd(r4, 0x406, r1)

[ 1112.415331] binder: 13305:13330 BC_INCREFS_DONE u0000000000000000 no match
[ 1112.434475] binder: 13305:13330 unknown command -66821370
[ 1112.442445] binder: 13305:13330 ioctl c0306201 200001c0 returned -22
[ 1112.453686] binder: 13305:13330 unknown command 1074283267
[ 1112.461624] binder: 13305:13330 ioctl c0306201 200004c0 returned -22
05:22:03 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(r4)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:03 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)='bpf\x00', 0x10008, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140))
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000040", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0))

05:22:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(0x0, 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xfbfffffffffffffc, 0x0)
read(r0, 0x0, 0x0)
write(r0, &(0x7f0000000000)="112404ae4b1c3b385687906374606e1de52d3ba3096420bd951b844d4f7a45da1f2149487e38db71c4209da0f660abfb80701b7c0abfe98ccfa55f4a7b8df3064e1cfb90650eaab2d1c75f6eea05af661c5d87e82735c9239a4da1245147dfebb99d41dac13968c6751a18684581dd024dad697390", 0x75)
write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x212)
open$dir(&(0x7f0000000340)='./file0\x00', 0x80801, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
sched_yield()
write$uinput_user_dev(r1, &(0x7f0000000600)={'syz0\x00', {0x7, 0x7fff, 0x621f, 0x1}, 0x2f, [0x8c60000000000, 0x7, 0x6, 0x100000000, 0x1, 0x20, 0xf143, 0x10001, 0x1, 0x7, 0x0, 0x0, 0x1b51e4f1, 0x7, 0xb, 0x0, 0x0, 0x20000, 0x5, 0xfff, 0x8, 0x3, 0x0, 0xffff, 0x7, 0x2, 0x549e26e1, 0x9, 0x0, 0x0, 0x3, 0x4, 0xa2ae, 0xe4d, 0x9, 0x1, 0x5, 0x6, 0x6, 0x7fffffff, 0x7fffffff, 0x3, 0x4, 0x8, 0x5, 0x5, 0x6, 0xffffffffffffc526, 0x5, 0x3, 0xba, 0x80000000, 0x80, 0x6, 0x8fc, 0xfff, 0x0, 0x0, 0x3, 0x2, 0x8a60, 0x8, 0x7ff, 0x100], [0x1000, 0x8000, 0x236, 0x1000, 0x6b4, 0x531, 0xfcce, 0x10000, 0x0, 0x8, 0xb8e, 0x100000000, 0x61, 0x400, 0x7, 0xff, 0x400, 0x24, 0x6, 0x19, 0x5, 0x10, 0x63, 0x1, 0x0, 0x1f, 0x3, 0x0, 0xffffffffffffffc0, 0x9, 0x1000, 0xfffffffffffff251, 0x3, 0x3, 0x2, 0x1, 0x7, 0x2, 0x2, 0x9e49, 0x1000, 0x0, 0x40, 0x80000001, 0x9, 0x562, 0x9, 0x8, 0x1, 0x1, 0x0, 0x100000001, 0x3, 0x5, 0x1, 0x100000001, 0x9c, 0x8, 0x0, 0x0, 0x4, 0x401, 0x5, 0x40], [0x80, 0x622d, 0x4, 0x100000000, 0x1f9f3491, 0x8, 0x147d, 0xb3ca, 0x9000000000000000, 0x9, 0x5, 0x3d, 0x2, 0x24e387fc, 0x5, 0x0, 0x6, 0x7, 0x3, 0x0, 0xb0, 0x9a74, 0xfffffffffffffbff, 0x2, 0x1, 0x80000000, 0x0, 0x9, 0xec1, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x400, 0xfffffffffffffff7, 0x5, 0x3, 0x8ef60000000, 0xa19, 0x100000000, 0x4, 0xebd, 0x7bc9, 0x4, 0x9, 0x391, 0x7fff, 0x9, 0xfff, 0xd1a, 0x9, 0x0, 0x9, 0x0, 0xce4d, 0x0, 0x6, 0x3f, 0x80, 0xa4a, 0x1, 0xffffffffffff20f6], [0x80, 0x0, 0x8, 0x5d6, 0x9, 0x100000001, 0x9, 0x6, 0x9, 0x6, 0x42f, 0x1, 0xf6, 0x1f, 0x0, 0x1429, 0x0, 0x101, 0x5dbc, 0x3, 0xd9, 0x3e, 0x303, 0x5, 0x3, 0xffff, 0x1, 0x9, 0x2, 0x8, 0x7, 0x9, 0x8, 0xb516, 0xf0, 0x40, 0x8001, 0x9, 0x7fffffff, 0x6, 0x4, 0x0, 0x80000001, 0x3, 0x1, 0x10001, 0x622, 0x7c65, 0x800, 0x4, 0x6, 0x7fffffff, 0x0, 0xfffffffffffff4c8, 0xff, 0x80000001, 0xeef, 0x5, 0x0, 0x3, 0x4, 0x165dbe29, 0x1, 0x190]}, 0x45c)
poll(&(0x7f00000000c0)=[{r0, 0x4000}], 0x1, 0x698)

05:22:03 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
getrandom(&(0x7f0000000000)=""/42, 0x2a, 0x3)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)

05:22:03 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))

05:22:03 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
prctl$PR_CAPBSET_DROP(0x18, 0x9)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="2a520004", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:03 executing program 5:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f00000000c0)=0x80)
accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c00000002500010026bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="fffff3ff0100f7ffe1ff0f00080005000107000008000e00ff0f0000080005000633000008000e00000100007c0008001c0001000140030009000000010000000100000003000000030000001c000100ff0102009500000000000000a08b0000070000000a00000004000200040002001c000100ff08080005000000010000000500000005000000000000001c000100045bc3f8c0ffffff0200000079cc00000100000004000000"], 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x20000800)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:03 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x80)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000540)={@rand_addr=0x6, @local, 0x1, 0x2, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0xe2, 0x71a, 0x1ff, 0x101, 0x0, 0x71b72d59, 0x1, 0x6, 0xc8b, 0x5, 0xfc0, 0x1, 0x2bd, 0x9, 0x100000001, 0x5, 0xfffffffffffffff9, 0xff, 0x6, 0x8, 0xffffffffffffffb3, 0x2, 0x18000, 0x7ff, 0x36a0, 0x9, 0x40, 0x9, 0x5, 0x2ad7, 0x3, 0xffffffff, 0x6, 0x2, 0x4, 0x3, 0x0, 0x1000, 0x6, @perf_config_ext={0x7, 0x5}, 0xf680, 0x101, 0x1, 0x3, 0x8001, 0x8, 0x6}, r0, 0xfffffffffffffff9, r4, 0x8)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="7ed0a984", @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1115.366368] binder: BINDER_SET_CONTEXT_MGR already set
[ 1115.374695] binder: 13364:13386 ioctl 40046207 0 returned -16
[ 1115.383133] binder: 13364:13386 Release 1 refcount change on invalid ref 1 ret -22
05:22:03 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xc1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$void(r1, 0x5451)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:03 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB="2c6f626a5f726f6c643d73656c6647504c6370754fc61c2a89d52cdd5e1b46257365747d7662c6e011e8892059ea2d5cc2985b6f786e657431757365722d", @ANYRESDEC=r1, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
sync()
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000440)={0x20, 0xfffffffffffffffe, 0x80, 0x1f, 0x10, 0x1, 0x100, 0xff, 0x5, 0x0, 0x4, 0x8001})
r4 = socket$netlink(0x10, 0x3, 0x13)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:03 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
timerfd_settime(r2, 0x1, &(0x7f0000000140), &(0x7f0000000180))
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x400c000)
tkill(0x0, 0x0)
r3 = accept4(r2, &(0x7f00000001c0)=@ipx, &(0x7f0000000300)=0x80, 0x800)
sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x23b8, 0x1b, 0x400, 0x70bd28, 0x25b9, {0x3}, [@generic="b1eee197e9d50020129ca110561051f72dbb95c4b4b895c9714d13876ea2702b089de8aed4d10c23e87d5d9415004702098a2a1fae3776017a1018b5170c344cf5653c3577c2b25efc93066a6a15d2856b3d4648501d489dd8d32acb658295b482c0a65d9e8b05769bbede9dbada8d36fa6f0d2241cbee23326ca3970a284d664e9404a1f030bf41c6adf9c9bf8b84662db76b14c2bed48feb48f52a80020e60d44560550749965b914e4debb48a12debaec8efb4987a4331bbaf9db2d67bb496c0668cc23749c01efed68d6c38166b7456490f16f06e5516118299cdc065c1bd6c9334204951864183d69b2b1", @typed={0x8, 0x1a, @u32}, @typed={0xd4, 0x74, @binary="cd1a1f9fbdaa66cfbeac6c7d191e837cf92e7feefde7444c8fe630b6e50725f401fcad96600ec422cd76c7d555322b45f0bfe0a65574880669a86a9bc4a8e2cbb7d461fa70e11b7070bee1fa9444ab0f2dc728ba51a423b0cd4c689fd765e1323b0403c4639225e73402de2efc49e935916eaec6bdf270476e86770ad2a1d00dc8b4ae974c48bd2fa0f52ed076b1949c86b179be30d7e9ee715a67eafda56162084485e51e8fc7c861f7ab957afd04524151d50938538b14c96b9000121b44d03e51a68924a3f2242793ed0e99ef"}, @nested={0x2128, 0x45, [@generic="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", @generic="2af6fde4ba426e986c8bfab3125f7b65c581ae9edec5998192b889ebe2e65ea87736543fb8f4afe7294d78249ca31bf055068974b60ce7bec9364fe6b089cc9b9014599b4a0d8eef6f2711ae91a139e932b253eb86a612e7b3146f115b1269b99b59fc7c90dabe2e5a30da0eb51a81078ecc1a8054a97158", @typed={0x8, 0x34, @uid=r1}, @typed={0x8, 0x40, @pid=r0}, @typed={0x4, 0x39}, @generic="27ca77b44dcf037b7323bcae36ee5d10153240ce3097026d7d411d931a6a8a05cb643e92c6b0f6ae9d78efa3ad29314c1249fcd40126f806c5078eefdd5946fe9aedb18414861078a554b60c29e3afcba16ade784ae38d3e", @generic="cb2c543b371447b11c4c1efb66f7515fd8f9e58d4765e9965b401930ae777c50a09dc4ed66bcc10277c9dc67227853e6bb48eba99ac62f2fc483149c11a897af", @generic="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"]}, @generic="16995aa5c1601f49bd6e4991fa7382f66cd36b20e7491be35d9f22528481315f09ba2148f365843791876da39d4ce60ed565b46d45462591d90331c8745246fb05df9ad6c6eac544e973e075e8d9bbdbd65119fdaf49211ef46ad282f4f5c52214ba7e30d8f5f43cc29137429d4ebbfba110589b5fb48cf9d73b81a46bcec175dc007f75d3bcff51348c539559a5e42b5c4e4685c76f24ec0b6bfd83902502", @typed={0x14, 0x75, @ipv6=@empty}]}, 0x23b8}, 0x1, 0x0, 0x0, 0x40800}, 0x4000005)
socket$netlink(0x10, 0x3, 0x10)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000240)="480000f9001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5", 0x64}], 0x1)

05:22:04 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff030000"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:04 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB="2c6f626a5f726f6c0a26bd3b4575a6e54c6370757365747d76626f786e657431757365722d2c6d6561000172652c7569643e", @ANYRESDEC=r1, @ANYBLOB=',smackfstransmute=.,seclabel,smackfsfloor=trusted#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:04 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x460129b437e2d029)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/120, &(0x7f00000002c0)=0x78)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
timerfd_settime(r2, 0x2, 0x0, 0x0)
pipe2$9p(&(0x7f0000000000), 0x84800)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x620800, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x2}, 0x4)
dup(r0)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000040)={0x2, 0x1, 0x7ff, 0x7, 0x9, 0x9, 0x3})
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x5)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1116.157672] binder: BINDER_SET_CONTEXT_MGR already set
[ 1116.163364] binder: 13397:13435 ioctl 40046207 0 returned -16
[ 1116.169746] binder: 13397:13434 Release 1 refcount change on invalid ref 1 ret -22
[ 1116.177122] binder: release 13364:13386 transaction 1494 out, still active
[ 1116.196105] binder: release 13397:13434 transaction 1497 out, still active
[ 1116.201644] binder: 13443:13445 unknown command 1023
[ 1116.211708] binder: 13443:13445 ioctl c0306201 20000140 returned -22
[ 1116.228025] binder: BINDER_SET_CONTEXT_MGR already set
[ 1116.238708] binder: 13443:13445 ioctl 40046207 0 returned -16
[ 1116.292486] binder: 13443:13453 BC_INCREFS_DONE node 1501 has no pending increfs request
[ 1116.301203] binder: 13443:13453 Release 1 refcount change on invalid ref 1 ret -22
[ 1116.310611] binder: 13443:13453 BC_ACQUIRE_DONE node 1501 has no pending acquire request
[ 1117.002706] binder: BINDER_SET_CONTEXT_MGR already set
[ 1117.002762] binder: 13443:13455 unknown command 1023
[ 1117.008266] binder: 13443:13456 ioctl 40046207 0 returned -16
[ 1117.008711] binder: 13443:13457 Release 1 refcount change on invalid ref 1 ret -22
[ 1117.014374] binder: 13443:13455 ioctl c0306201 20000140 returned -22
[ 1117.034294] binder: release 13443:13445 transaction 1500 out, still active
[ 1117.041921] binder: release 13443:13457 transaction 1503 out, still active
05:22:06 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(0x0, 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))

05:22:06 executing program 4:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)='bpf\x00', 0x10008, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140))
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000040", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0))

05:22:06 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = dup3(r0, r0, 0x80000)
recvfrom$packet(r4, &(0x7f0000000700)=""/90, 0x5a, 0x0, &(0x7f0000000780)={0x11, 0x10, r2, 0x1, 0x80, 0x6, @remote}, 0x14)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
r8 = socket$netlink(0x10, 0x3, 0x10)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:06 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0, <r1=>0x0}, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
r2 = timerfd_create(0x6, 0x800)
timerfd_settime(r2, 0x1, 0x0, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x13)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRES32=r0, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="436b405f96", @ANYRES32=r0, @ANYBLOB="040005000000000008000000", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000400", @ANYRES32=r1, @ANYBLOB="08000400", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="10000400000000002000040000000000"], 0x74, 0x3)

05:22:06 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x1, 0x3, 0x6})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:06 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:06 executing program 4:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)='bpf\x00', 0x10008, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140))
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000040", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0))

05:22:06 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000880))
readv(r0, &(0x7f0000000780)=[{&(0x7f0000000600)=""/67, 0x43}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000540)=""/34, 0x22}], 0x4)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uinput\x00', 0x802, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:06 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x80000001)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_FPEXC(0xc, 0x3)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
prctl$PR_GET_NAME(0x10, &(0x7f0000000140)=""/72)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:06 executing program 4:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)='bpf\x00', 0x10008, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140))
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000040", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0))

05:22:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap$binder(&(0x7f0000146000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/26)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='selfeth0\x00', 0x9, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

[ 1118.396507] binder: BINDER_SET_CONTEXT_MGR already set
[ 1118.405738] binder: 13465:13493 ioctl 40046207 0 returned -16
[ 1118.413132] binder: 13465:13493 Release 1 refcount change on invalid ref 1 ret -22
[ 1118.423429] binder: 13465:13493 ioctl c0145401 20000480 returned -22
[ 1119.137555] binder: BINDER_SET_CONTEXT_MGR already set
[ 1119.143643] binder: 13465:13520 ioctl 40046207 0 returned -16
[ 1119.144280] binder: 13465:13521 Release 1 refcount change on invalid ref 1 ret -22
[ 1119.158455] binder: 13465:13520 ioctl c0145401 20000480 returned -22
[ 1119.205088] binder: release 13465:13521 transaction 1509 out, still active
[ 1119.219222] binder: release 13465:13493 transaction 1506 out, still active
05:22:09 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
alarm(0xffffffffffffffc1)
connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8001000}, 0xc)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x7fff, {{0xa, 0x4e23, 0x3, @empty, 0x5}}}, 0x88)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @local}, 0x101, 0x0, 0x3, 0xb, 0x0, 0x5}, &(0x7f0000000040)=0x20)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x9, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}}, 0x88)

05:22:09 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="009a5fdc5a14c9410425bd7000ffdbdf2508000000080006000400020033206f77a50b556629c29fb8df8bb7db6540dd6f0735cd03f1d63d03"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:09 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

05:22:09 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_cache\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/66, 0xfed1}], 0x1)

05:22:09 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(0x0, 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:09 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0xa5, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08631040", @ANYBLOB="428f4ceca2a4f8541b6ffe6dc76b1ebd40360a4ea1e499b6ed840761ba252d8f512feb6ff5b44bc99e29983e6ea3ceb8612788463c111291fa4ca5134a6dc717d6d1354d48a1a1aec6f15ed4db5c9c5ed7d2be7061ed8b46ee699b4c43759393c80e4d9da232a9e6d2d4a51d00ac979820d338ea26cc6beec1151a7b2fce5007412ad97c474417447e67ac1c11114985b365033cc6a6d480f6", @ANYBLOB="0082fd70f1a00000"], 0x79, 0x0, &(0x7f00000009c0)="a493e5726bc3f8af7555946fb37b4a23cb12f4fb8d2262a0305548c880ed105f7bfa8cad6c1d715f19515c6b7b86e493ffe0adb34abe0c156fe6135ed1cf5a8253692da876d3ff88eb6a21ef8d04943d13116b063117ef9b13eff57a590a3ee3cad1e29aeaa8797cf8200935c0c60a99e10245cd6ce00ab196"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={<r8=>0x0, r2, 0x0, 0xc, &(0x7f0000000480)='/group.stat\x00'}, 0x30)
ioprio_set$pid(0x2, r8, 0xfffffffffffffffa)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xb)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0xffffffff})
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=<r3=>0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, <r4=>0x0})
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x7fffffff, 0x0, 0x3f})
sendmsg$netlink(r2, &(0x7f0000002b40)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc, &(0x7f0000002ac0)=[{&(0x7f0000000200)={0x308, 0x28, 0x2, 0x70bd27, 0x25dfdbfb, "", [@nested={0x2f8, 0x1f, [@generic="ae865f7764a2d175868bea243297246ac6145df7306ad834e078d871441b908d1533c6e52e95628811d0984390893cdb168a602c99fb83ee49bc4c982ecf44123ddc6967287ada768441eb6787b13c96a2d56b45d57e1c0b3d7fbff5772a80ec815f2f8c9f72aa3db5aba94bcae0edefb2a7bf7434cbc54bf8e90e83b296fad597b7787964bdf2cc", @generic="5ae29be36543e355d4fcb748ae40ac45048b8add53d37554c8f42ab1de7fced6b291a9baf0d1037d542032907c88abdece61d89b1a0ec4c65afe64b6d50ff13b74969f20caad831c3ee862f9c38c2578b01e93e4aedf6deb39823386b326b5ffa74784ead478de9bd941565afb9aec63da0a4c20c1ef901c2f66ae933c8bbaa52ceaf9e7e286cb82a3790683dd1d51d57c8a8900fd5f54de1fdb4f22421b795be279dddbca7b7bc8d92c5de5cfdba13dbf3aba9855db8322c47b6c253a", @generic="48678d8fb4f05a7a1947a05378c29b3bd503792fa4443416f56e1badd7a557a538e2af75bfc8227506b2b16eb65e456ae797ba0078311262de0ba327b7fbe387d402f6723fd303ce577e083cc05169b0aa138e8682438b7e6955b580fbd883330b41391d8646b6140bbcf7db3720b218f87630e451a0aaab50422ffdd1cfe1d1f2dc1a5feb0c55a65bd658c534ec6509daf0c1386e5f7d7c5efcdd59c07cd91f1ab1d694fe0cf5dcc1ce352be7772f805800601a9ecb7dd4c49004b72389448c7cd6ef8b124908785378e3d3e21d8795", @typed={0x8, 0xe, @pid=r3}, @generic="21446ca4c6c5cb7fb86e79acf9c3527e3eca755080c751f6f89f8e60e2df71eda641d229fe8fc694208289d2225b06153d3a50d1debb1816da04acbf6e6c27e4f6b9a12c465f474f8e507dc8ea53733d8af28f08a49c153a7f87f789fb70d4951703913efbd98e927073477cb6a34708af1b3d6af6d1597ec1023d", @generic="4f252857afd053e771c0be7a9878aa35c2269fe67643b47e663591e2cafee2d8632096f95f1ee01b077af5bbde658489d7eff6a284ce0b19c9257bbfa9bfec75d3277c51b4527816448c9a6cc2deaba48e2a687461bed0ec8013aab6"]}]}, 0x308}, {&(0x7f0000000580)={0x20b8, 0x24, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x10a8, 0x49, [@generic="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", @generic="16ef5acd2f7f9cb80f2210c365406edc3dd8b7aa520057705afcde5ee3d150c58b34c73081012daca5792a76a592dbbffd15004e466f7b97ae2bf251543c892db3f887d2712152a04284aa5355ff79081a7e54870d947b70fe667b0db79e9476fd7554acc0e3c88e43869737bc67ab772dbf3879a62fbee7877220b692dcb21f47aaf25264633e3e2ec984acb881f20c129cbb4a6c7bdafa9c170f3d", @typed={0x8, 0xb, @pid=r4}]}, @generic="af9b3fd6a7a540f27f0968e27e8bbfbf1e24d6d60abd9808709f4264a1607d08940f22cb807bfbd4e1e5c2316f9df77ac59677bf4c7d5394acc06bdac76148e8eb3cfe1c9c0429f22c768db4f5b58ea2565121fe9bb83fba8fe7329b543e523e9c76dab4429e888a0bc7b74e7739ef7f8c2b6b7259530f423cc5d74f5faa85a7ffc9c92b47d96cbc80a9b5549498a9f6840b1ab2c43af8b8e3e30a7709f1cc0410e3dab4c2224806d3f15fbdcb92d8af2e16d8c98d0f20e701272d0d0e0b8d9a743a75a47ebb9283f34341a6fd3ee5b31b02df65974fe84f96bf0da3d24a627eb9003d257aecaa44d0c3d37f674ddcddf82a545a7a53d7163a1e8971243e80ef65594b3fa165a8f3ddbb1ebd8b4c3af89c9a12566e7a0995d51b1036a13473fe962dcf3cd64d3b8c8b928daa64430d89ec19fb796da499db89ddb34ffeaab4899db387b9b5ea71994e44cbcebd95a9eb8bfc0a56dae06a44cd20e67f6dc87b57bdfc735c1e393f8b5c6393bc16e1bb461ce60dc5dec40424a16f34924c191dc3b50f964a5ea7873073c371bc843349fcb11ed9daac46e46a7f1158b6fe232d8d89c50b08fc95d136d1394f25cba507bc5edd1259507b316a1796579f2ba7d0b166d968d921fe6a1dc5600afe5dd397c261a4bb76d12b600bad69e9d481bc3cfab46a484ee12ffe1442e714492dfffd5b058c715e781b2e2eee2318d2f970675b328038e8d6eb523e9247d528069a3cf64312192f072fa82f8b157886690279fa301641421456027bb58baeece8c17b1ef1e892337a147c0411374b0e9c7055a945368577536741b0ebc75b78053272b6a3510ef8f8e416c836abca4f2219885986cbd2b2fb1ad3ea4d3503640b2c889a7c93d27e1ab642af2a9ec8341d93ea4f553eb18e41da99e60964a0a3304494e25a2dcee3c7b23b34f1de9e391ecd1b3439b03b75dfd53911e00dc54d6b8cc684deaac3a6c13c50611d04d4a4641ee4a432399155f7d9063c32cee5ced91a275cdcd24bc22d3141a6e39daf6aa8e27a968b2bcf034f3ee7e1b462be7d6d2bb3c005ce1c0d89d9e8e1f84c5f1d3af9030d3edf403480c02101204de0e365d11f96720b4ac5f8f7d25365bf55e3339334b030b9b698eb9ab29c72cdbb75c44eb695fc107bd891fda6993bc32f80374a3f351e2e0e0c1f24584cc7e4b6b25c794e4ed4999100ca2b7e7bce74397fb78621d70fee90af5da0d8f4845569569c5d1224f39921412d04b0a8055d6ba5997e2b1fc74ccfa8cc5543cd42b7482d772a1dd66951b81f32dab522c3bdb49f4de4ce3296e2e684ce394b8a79bdac5bcec8b8a731430615564a190632c68c3216e7e483805207e1e000c7acc4b0c1ea861f64008a40ff701afcfda8ac666132e8f6dedc6c721ca969b461b46a545a349df2df2cb564067c4934a867f30c19bca19bb83c8611d719a35b0fba1a48722bc342b662eb513991b0b22b389877ed0c8b35828670dbe56bc4621598b370beb3b6cb559655ec2f88c34ba560065ba23d3200486a00455f5c088f11e8814f0c5c8035a545c1908c86284d534670e0b7af22c4d581cf0c8267eb1c6911c3a39c3f19f37c65ea291d98de06cf6309fcdbd2581657433b34db36972f806634b44a5466159c1c0759804abc485a54048dc6e59ecdd4620deec80b87748aa1ea1e36bad2c09b7183a4dbde68e4028235440ccf7557213e7303f6022f2a35663c352b985f9e81611753d0219822b0f14b8de5df7e706fba3f3cce404ab3e2070c4c0991777cd9380a3a56e45ba5e95393088e7802b92718ddf0dae65183458975b85a8449671f97e749b89855f4bc2dbfefecd649a7e7e99b7da6316bb6ee5d077d46c626b3925f58bb9d129c0509f83663db67953162e1c125ef7fc6ab2d59c2c4d90f68e6c14e391d52e836f0710a35e06d47568443e42502c50d47494f749450c41d81415b478c1ad27a5fbe70cfd11887d0d24da4ad1ea0c1083291a34230c472a0200fac5453b70d6d333ec9bc296335819ea64abb4a16669f6f15952239bb3f225eed1ca8fc9eef933705ef5815239dee40f498aa601453397f41d886d79e9aa82c877b14d895442406e0d33ac4a8dac4168abe49ade7fc9c77dbeff3a993bb5d0a9c47d80bf75b011a00d6a6c5c1ec577645ae6f1bf0bf241ea72f62103f645d41ba61585ce40631306a89774f01eb716c2deba0e9ef2b98981ca081dd81d973f6ada872299aeec12e685e9ac369af2ebc0590fed1756407c7feba744d9098795a755d1746c7a139b46e132066db807aaa202347601036f54445aa8c52a70b308a0ce62e355f9475bf7282e7eb815d4f5204c7cb22718696dd745724408fcb3e9b28e3f9994e288554d8f1a99dd202a5a06979ac99b21415fd45274a0b36c0b6b744eb0c4cd79c8fecc25c0502f16b62e7346eebb57e06dab0a117b2fcb262b7e1bd5982d47ead32404fa4e282b370f3bf84cab749b3cbdc54874608ef0efc40d9b3a6c5a32d31b9e5d12ff4807079592bdefe54c7d403e375a4a1c0c4fb7bbf1811b73214f6cf2708202964a71d0ed9b462f9d45c53e6365c65d1c5ad7b9a4a0fed8e02f3ba10c3bb490eeb0ec36058e36568e8aef7da387411706be7cdfa27ab953d9a392759c0acb0514d7cdc099a32828e3a0820aef2bcfaf788d9c160c9e2c9b70b9118a88be900726a7b3e7e54d771f582acdb90ff2baed0896532488302e5632086c083229ce66d8d881bf7616ffe09a51f89ceef308232b46e77e16a8b62b7b2caeb9b4a066e4f5c2a797e163afa28110e11e5e3d83c37f056c60eeca3427bfa0587f865992070e8cb84823504866a78239587e0c3e391d5a6f55391036bd81e6e5621fe1b1d436f6c24909ae7246ff1db0acda1ce7bf369b0c093d7474786fbf3b6673ae964fdb6e362e9bbb3b0bc184767304e69e1a6010342c63b612f76d169a077ec162fa0956d8840b0d5cd373ceaf056879eab3cb77fca216af42b3d73df0af8f4384bb7352dd424716c5a05598af84b7767db13628ce1394a5494daeb1e0f52df5d4671478ac432cdf7cd69a1fabdb141a78a8150eb55b2740280e31e1c9b9dbe688a4894f21561058892e33595ebc74b21565aba1d209452d6cd154f6dc0c3825e43a39890eef18b8bafa918c300e1df90b1fba10436a9082321295d70a386a4565b232372b41660f16b0d9e6c8b1ed5d9f045b17896c21e5ee88004c64b1bdcb8b58d2fa8a89af4fa7c1772d1826c1e4442674ea52cda47dfd330bbc97899ba642b81f55a1b237a0cb5323b79f99117db0017f9694619cb780d339096f499709e0ec429b4743585c02ce7c085357dcb735c3790a46ac91a647c93da6a1ca93c59ce9fbc27f8234c48f37f0547e3ed6d99d90b7b31a8933c82248c1950592054979140ba7f9bbaedac4e69363e0545ae442e0b1fc3240f42bb86d05d5b0b806c8ab67690144bad95da6a689216f7d311cfd8f63061ed3c0c9bc62d1d5cefab73fb73a3d79626bac7d465081e701bb37f7c56cc7d59f1b8d35542ba3b316c8ccbdf021b76e0838a817918a3d53900a2b25327e58855bb371946558c945ef0aebabc467dcdcd70f7321c678e9f8d943a4b5fea69fba68a132556b12fe15d6dcc738d939f91c82342154108e43fccae5c71f69b1cd8bc6808c6bc87af38c3725f2a384ce8e27dec7c1e52e38556261ed45d542fe36a1e070538f0994b5516a63398e9b6cca3b43505b03ed36d6fe437bd78b84c374f7dbad06b94ceee73bbaf1dd6d29690efde1b6446ed3e3dd38180a789363d9244fc45d71c1d231fd3d7b6f25bdee5c379a703d5e410f2c2ba4db2931f18c66df65a35b6a2c117de479c0eeb0c5d870e2404865ea967a020b716a866134f0fd62fb8cf710f5caf50272dc2fa10c5ee9d56428cbeb0a1bfe4b4f8e2ad3456615307cb92f78d015d37c070d7bf0b3c9bbbd79db7c0c0ac2a8a217f263bd01117019aed62c2ce0032b7fb605117998f0283f9ea98169ed400c9f2e23f4c5c248834a4c7712c65366a6655e25253b2cd19be8f8cd2c9f932c9261cc4e147391a7dfd6179400bda06d2e74ba241fa8c12e15f8c13b9fcffb5080b1cd783c577db500572d08f7ce4836e8e37e87df221a33942926ba035dc20c70a686d4cc7f9d7e98ffa35f7e7dd5320cfd4c81bf04697fa6746b832ca974804e3a408548265b8167668e4711d3960a3cc2dd6f7efeceeb78395ef7e82fe96401c262a8a7c84e668033fcd98c3e1cdf4ba701036fdfea48fca55cb73bd1e5dc5e68f2c72713f3ed10e617b51ce7936711c3fbf794f38eaccf168527928d1f869ef4db744e98fe333cc1dc5dac35b87d947e7112b993744b4ee98c1a82a96340950271713d093ef5c80ddeba36c6be18f3bfb5f6e0a2c5f40ff152752f2a67eda409f568404a6d9b2a2144ac4ec0f4fbf5e840c739c047f974bcad171732842957275e0dd8d59777cdc061627de52b1e4ea6989a4f6520b7ae1cd9613a4beec68ae5ae644efe8bcc011fffa7367f164d0ffcddacc77ff45c0cc0de6b11539c1d977f5f29c7844757b65854ebe6bba319459fa4b3ced6b1c85ba2b9de9215c0cce13b065946fa73926070150c0e916cd85b4d8d548614e1a7657e15b31dfb01f0ac83bf0b8c0333c36d4c79aa290da417d99bd451ece4f25014bb5645035de6bf92b6af2529867ff58c34b9e081be9e9d7b18c5ca3504616f257d1a324832bfca7905d90773fe9461ae4a76833b8864684307dea122396828cb2c269a9530d2ac54333dd0ca3608eb347caa71fe0f403b69ab177158f4142958a40cb0a849839d9e0ddaa4743ae1b8132392c943f735af991d2c6f7761c5cfa76c69f2cc5b3527bd7cca8d6001bdb401fa93fc279db2952bd90ad3af7bc027b4f9ed2c36d9abb8aecc3af2205917d4321454ef18c1c0ca9241937ed298b26d507793e4abd20c33cb0317d10b3c8bb22f78aba1acea5cb9b06fb2e57b513e17bb872a2859c09ddd8ed21259d413838aa708dd8420f33d1efde9057e1fe582ea37d8cfa653ad9de2521a112c78487659b692f27828a968237260261e13f871f83eeb2c92007b12a06fddc16d92736ae193124696605501fb617a1948d76e379106fb01b2551154c2c135df05c51616890ed2e133722897e470503ac2d458d2d7f1b9a43d0f1d85df30352f660a573740eb24f1a8f660c7181c1f109447e87620919f4e1572a737cab21a8e6978a6578dcd7616a0b97a7438d76373bb303605bda5546fc3268f7b56af21315b1e1d06ea48f9962bed3bc59190ff8374c268529c90ef3b6c119ceb17e1e05f7c446a00702dc1ea01d9c6f05ada53ad57362bf429df08d9d5fd8ba0d79f6ec401d4072d3f37bb3e5097701d9dda6c8ee9c9c86f804b8573fed7bd10c48e4d12cd02674d39329cc4a65206b6d381f6dddff33a10c20c6071849de966595e88c96d18878ae26843e72b237d436deded325782842ad06fa8c564817255be7f2085a54c1b31a4dd80a52abff9293e5ea597cbfab7763b346527e49158e83aab2f756459544e5f0cab9a25eb9dbaf0f8060f546a6bb65cbdf56749dba62b302de5169482ec4a247b1822799dd71f8ad290bba092e0cf22b9f400abd18c26c86c05443de139113a3a4fc66dc266cae501c6929a4f32366f8e45aa4e6560c963af6b93f7afa41065c023a87f63574c74251e5fc6de0a39b7ec97b4a66d1efebdd794e10d58f3eff61473050173a020dcb09a32737da42ed22914d7753a4328cc6a155"]}, 0x20b8}, {&(0x7f0000002640)={0x7c, 0x36, 0x104, 0x70bd27, 0x25dfdbfe, "", [@generic="9d7d91c7efc404aa8121e6eea9326b9117e44ce569f4679926c40fbc15ac2400047066b060ed1e93d2cf667be8143a7749e958acf05698d9d26f8c84deb8b587fc2101461112cde26dd408e097c5aaad13d895ccb4c7d4a394daaa10e4e1adeb97391d7d54d497f049"]}, 0x7c}, {&(0x7f00000026c0)={0x3d8, 0x39, 0x716, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x4, 0x5f}, @nested={0x3c4, 0x2f, [@generic="582c00febe025d4b2050e392b26ab21fe8eb377d87d2598072df3387e20d147c6214b5011435eb1854a84362b90ff06c00de1e55080848e77cbcf30b4a10fd4b9bbed8a2117957e3d80d00c96299bb06993659e005f6634e26faad86b3788c904e573e11df500a8cb59148e0f9a1fc222858d13424beb95c6f1a7f303c1196f253eceea00deda965a675d2c04a", @typed={0x84, 0x94, @binary="848064243790f8f117d82265fc54a35331d9d4fbb6b29f452dae3643e5610d7bdb4c131647127e46c2c081100f615f2b5acf244691d49f4ac10cd3fdc8a19347f4ad1c4a77a70b430f876588d91383ce4ae232d8fc8dbbca41bc69e0b217cd5132dbe8e04786336593e0129759708a7e331270bc9ca46da6ca6ca996482c82a4"}, @typed={0x4, 0x5d}, @generic="94c5851fb3eaf19fa57a9b3db6589315a5498ebd510e208825bd40886a08c3482b6e41ccd660da6257a6384255fe539d5380b3e51395f6fed661fe587f32c7c1a891e118a2441457a263690a9c6814a01e506cd4e5e25f1bfcafc72bcb7f080f67abdceebc92d2d56e9d5c94a9d7e2cd28b7c3afaebe9dcad2b1b89415cafa755c175c91e87b2dbe73a00f80759ff6c4436857dc5af5e2a45bd1b1bfc51a90cacb02e27472d72503272b6a", @generic="77bfc24d49eea2f3ac0cbdb4853855bd567491eadfce808cd7fb86c4f89784868a1f25969c2d5007e0dc258174efd042767fcc9526d570c28b576a14137f774cb4d6c45e15245b2d368a7d86716ee0897675d458b69cc94af12d99c06e6b625cb2ac4231a5dfd22b173837afec26ab38e1ff56b677cca51e66d60c856fe39b33d7dbaf5e888acbc06bcd2ae5fe644254bc55fb9ea004c9a54760b0f54aea90fcb9991a2904c14c2927226c1fc57ebf9e7c4a8b36a41418489b6f0c69afa54a208711574e2898e1c8dde3d3ba381b6c4be85b240b8fd1af77203786d94beeeef5cff1d8ab3e563f6e2ea54a04ee66bf867f47", @generic="e8243bef84a07dfa0990fa3e4e842771fcf4a313369a1a7e57b165ff64", @typed={0x14, 0x5a, @str='/dev/binder#\x00'}, @generic="6fcd24f5156a44f3b71ccfed9d9c1afc80db2d725670712806b980225230aa33b5a383faa7e139ebb7d40a9e2dd5948f86ae14011f2d3a6aed01d6d43f92456ba82a0abcc806d2e640f1fd70a948d3f33b6f367b8c14d7b7ceb9d302796c56065d50af5188925fadeda4993ca065817af4a4615ae371f8476764d873f552a8fa8b803ffaa09b437d47146ac3103e3f90d1a84d5ea048b7ab3dc8cd9c085d7cd753b322931af4f52339d1c12c4cf119ae0d69b37f991afff8bb2a34890bfc8e1abfe93bdbd8f1a266a676f6998432ca21b5b67883bac3e09b53c6d109b4"]}]}, 0x3d8}], 0x4, &(0x7f0000002b00), 0x0, 0x40814}, 0x4000800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000d50000000000000900000000000000008000000000000000000030"], 0x0, 0x0, 0x0})

05:22:09 executing program 4:
clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setrlimit(0x7, &(0x7f0000000380))
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00')
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'bridge0\x00', 0x800b})
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0154a0704b9530ad80be69a148a00000027bd7000fddbdf2502000656040000ea7f"], 0x20}}, 0x20044090)

05:22:09 executing program 4:
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$inet(0x2, 0x3, 0x7f)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0xcf, [], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=""/207}, &(0x7f0000000300)=0x78)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r4 = getpid()
perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x732, 0x9, 0x100000000, 0x8, 0x0, 0x1, 0x42, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffa, 0xaa9, 0x7, 0x1b7, 0xfffffffffffffffc, 0x101, 0x1bb, 0xffff, 0x8, 0x20, 0xb, 0x0, 0x0, 0x10000, 0x9, 0x4, 0xffffffffc4919c31, 0xfffffffffffffffa, 0x4, 0xf2ea, 0xb07, 0xb5, 0xe1bc, 0x7, 0x54c, 0x0, 0x200, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000340), 0xc}, 0x10, 0x6, 0x10001, 0x0, 0x10000, 0x2, 0x3}, r4, 0x1, r0, 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

05:22:09 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r0, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r1, @ANYBLOB="2c736d61636b667374726107000000594117bb2e2c7365636c6162656c2c736d61636b6673666c6f6f723d53b9edabe874e95c7472757374656423216c6f62ebfcffff"])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1121.432007] binder: BINDER_SET_CONTEXT_MGR already set
[ 1121.437731] binder: 13529:13551 ioctl 40046207 0 returned -16
[ 1121.444859] binder: 13529:13551 BC_INCREFS_DONE u54f8a4a2ec4c8f42 no match
[ 1121.453311] binder: 13529:13551 unknown command 1309292096
[ 1121.459373] binder: 13529:13551 ioctl c0306201 20000640 returned -22
[ 1121.468776] binder: 13529:13551 Release 1 refcount change on invalid ref 1 ret -22
05:22:09 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/214)

05:22:09 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
madvise(&(0x7f0000a75000/0x1000)=nil, 0x1000, 0xa)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000425bd7026c01d603d9ab86100ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:09 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

05:22:09 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000540)={0x17, 0x54, &(0x7f0000000700)="fe41ab2a49359de6bec4cd2f99e663a43310053b146db79edf6718078d28481df6fda3fe9d5fcb18fcc64b4d41f6de60fbf2a3a2e0199bb5de2ec0e4dd6391ff51730d13ffb3841d807a1425dc99eac99f70f11b"})
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001dc5405ee2172cd27f3854a58c79df4060bb2a27525aa3fff489ca84701c3cc2b05e98f7c2586ff13e66b4fd31282437959b4806c97254f5127530358b5fba0a59c9cea71336ef2de37a5cdaab547a8b94ef8cbf3ef032b100c8377858b7f4bf00049b9154145b06466cf9be47a83a6a6164100d920c5c70c4b8df2a682143024161326ceb911244f587cef5fb02cedb809294797cab59826311929a3460ac9147dba35b4cc2888a39cd0f09523b9a820478515d", @ANYRES16=r4, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000440), 0x1000000000000182)
accept$inet(r3, &(0x7f0000000440)={0x2, 0x0, @loopback}, &(0x7f0000000500)=0x10)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000000)

05:22:09 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000640))
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
setxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x1)

05:22:09 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="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"}, {&(0x7f00000002c0)="03c5f786dc42ee42c0173f91e46a602452366748eaa07d94b68073f7313bee782ced14129d2c4d626d096a05353d036299be526ced078baba7e9bf5b7be4392aa77baa547e132cf27341563a7cbe4bbb8d8fead5cfbcc6e8a6efa47ad12b568f5f281388455ee2f44ab216dd69"}, {&(0x7f0000000340)="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"}, {&(0x7f0000000600)="2c9506f3cd158a08ecd61da63f9a3479352eb2f149af066cc95d8211a93ce009920c6203edc3ecb80ee88acb8ade2be59f06b40fb190d6a8a6bcbb86775868311b9ce9987bff2056d2f0e0faa9f58350dcdbd11f0a2da86b6e79f1d9560bdba927b9518db2c65c4009bb56da7ab0931522301835fb4689a2bd594fc08439c22435d3758ff6db772a56275e53e8e45c0634717bfe47bdcca81b4db712bb1f7a6773ef44453d7688bb754ac187c65c0ca78e531cf2b1a43d411df4fb1cbedab216331dc2b87ac5274a346f192abb80083c56caba5cc853fc49e3"}], 0x47)

[ 1122.172676] binder: BINDER_SET_CONTEXT_MGR already set
[ 1122.178123] binder: 13529:13559 ioctl 40046207 0 returned -16
[ 1122.178359] binder: 13559:13601 BC_INCREFS_DONE u54f8a4a2ec4c8f42 no match
[ 1122.185537] binder: 13529:13602 Release 1 refcount change on invalid ref 1 ret -22
[ 1122.191130] binder: 13559:13601 unknown command 1309292096
[ 1122.191139] binder: 13559:13601 ioctl c0306201 20000640 returned -22
[ 1122.201763] binder: release 13529:13551 transaction 1512 out, still active
[ 1122.218379] binder: release 13559:13602 transaction 1515 out, still active
05:22:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:12 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000880)={0x0, 0xfb, 0x1015, 0x4, 0x400, "e66e7a23c3c2b6aeea87dd9d48f2f564", "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"}, 0x1015, 0x2)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x400}, {0xa, 0x4e20, 0x6, @rand_addr="e523363d9cf099c5c74542bc3c50b88a", 0x8}, 0x3, [0x343, 0x3ff, 0x1f80, 0x6, 0x1000, 0x3, 0x1, 0x4]}, 0x5c)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:12 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r2 = open(&(0x7f0000000440)='./file0\x00', 0x222002, 0x0)
ioctl$TIOCNXCL(r2, 0x540d)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000425bd7000ffdcdf25080040000800060004000200ce1ae8a0e84449ed0de9e6654f20e58fe8866695222d835ffec77d65f1885b1c93de8cfbfa869b0fe548e35f1670c080bc0c1843d5d55a56e4f6384b89dbf22d2368426b941e000000000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000600)=""/132)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:12 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

05:22:12 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x803)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0x2c)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:12 executing program 4:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
alarm(0xffffffffffffffc1)
connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8001000}, 0xc)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x7fff, {{0xa, 0x4e23, 0x3, @empty, 0x5}}}, 0x88)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @local}, 0x101, 0x0, 0x3, 0xb, 0x0, 0x5}, &(0x7f0000000040)=0x20)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x9, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}}, 0x88)

05:22:12 executing program 4:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000040)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b5000023ebcc0800190001000000", 0x24)

05:22:12 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:12 executing program 4:

[ 1124.452388] binder: 13608:13618 ioctl c0306201 20000140 returned -11
[ 1124.482496] binder: BINDER_SET_CONTEXT_MGR already set
05:22:12 executing program 4:

05:22:12 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x80130, r0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x3)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1124.500891] binder: 13608:13618 ioctl 40046207 0 returned -16
[ 1124.512646] binder_alloc: 11830: binder_alloc_buf, no vma
[ 1124.529271] binder: 13608:13618 transaction failed 29189/-3, size 24-8 line 3135
05:22:12 executing program 4:

[ 1124.552207] binder: 13608:13618 BC_INCREFS_DONE u0000000000000000 no match
[ 1124.576268] binder: 13608:13618 Release 1 refcount change on invalid ref 1 ret -22
05:22:15 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x10000, 0x1, 0x0, 0x5}, {0x1, 0xdb3a, 0x8000, 0x6}, {0x4, 0xffffffff, 0xab, 0x200}, {0x40, 0x5, 0x100000000, 0x7f}, {0x20, 0x3, 0x7ff, 0x5}, {0x0, 0x0, 0x101, 0x5}, {0x0, 0x3, 0x876, 0x9a}, {0x0, 0x280000, 0x101, 0xfffffffffffffffd}]}, 0x10)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:15 executing program 4:

05:22:15 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0xc01, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
splice(r2, &(0x7f0000000600), r2, &(0x7f0000000640), 0x4, 0x2)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:15 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
pipe2(&(0x7f0000000480)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f00000004c0)={0x3, 0x4, 0x401})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:15 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:15 executing program 4:

05:22:15 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
pipe2(&(0x7f0000000540), 0x80000)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x9)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000440))
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000240)={0x3f, 0x8, 0x80000000000000, 0x80, 0x200000000000000})

05:22:15 executing program 4:

05:22:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x3, 0x40)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x128, 0x4)
close(r1)

[ 1127.475374] binder: BINDER_SET_CONTEXT_MGR already set
[ 1127.482094] binder: 13650:13655 ioctl 40046207 0 returned -16
05:22:15 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:15 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80000000003, 0x80000000000000c)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000140)=@ethtool_cmd={0x9, 0x0, 0x300}})

[ 1127.541619] binder: 13650:13675 BC_INCREFS_DONE node 1520 has no pending increfs request
[ 1127.551485] binder: 13650:13675 Release 1 refcount change on invalid ref 1 ret -22
[ 1127.564198] binder: 13650:13675 BC_ACQUIRE_DONE node 1520 has no pending acquire request
05:22:15 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="3e0005005e9c6bc5958c49190cabe4fc1b7e1dd88e0d3736986b51419a94e87510dc27067800000000", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:15 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c004)
tkill(0x0, 0x0)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/168)
socket$netlink(0x10, 0x3, 0x10)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x48}], 0x1000000000000064)

05:22:15 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x1008b)
r1 = socket$unix(0x1, 0x1, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x2ae, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
getgid()
listen(r1, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x800)
r2 = fcntl$dupfd(r1, 0x0, r0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
accept$inet6(r2, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

05:22:16 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f00000007c0)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a00b630217faf1"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
r7 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
fdatasync(r7)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[ 1128.256412] binder: BINDER_SET_CONTEXT_MGR already set
[ 1128.262607] binder: 13679:13679 ioctl 40046207 0 returned -16
[ 1128.262973] binder: 13679:13713 Release 1 refcount change on invalid ref 1 ret -22
[ 1128.277081] binder: release 13650:13655 transaction 1519 out, still active
[ 1128.290389] binder: release 13679:13714 transaction 1522 out, still active
[ 1128.353438] binder: BINDER_SET_CONTEXT_MGR already set
[ 1128.358985] binder: 13718:13720 ioctl 40046207 0 returned -16
[ 1128.366298] binder: 13718:13720 BC_INCREFS_DONE u0000000000000000 node 1526 cookie mismatch 0000000000000000 != 4000000000000000
[ 1128.378569] binder: 13718:13720 Release 1 refcount change on invalid ref 1 ret -22
05:22:18 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:18 executing program 5:
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
ioprio_get$pid(0x1, r0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x162)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:18 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
r3 = dup3(r0, r0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f000000ac80)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f000000acc0)=0x10)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:18 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0x50, &(0x7f0000000480)}, 0x10)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:18 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:18 executing program 4:
clone(0x3102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="390000810000000000001d6b92068aafb4191fd1f5dcd496402905470484d183b69ad80d6bd62b92314cb67fffe3010000b5bae2019dd7480b"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x1f, r0, 0x0, 0x0)

05:22:18 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40284, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:18 executing program 4:
r0 = socket$inet6(0xa, 0x40000000000002, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)

05:22:18 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1130.545535] binder: BINDER_SET_CONTEXT_MGR already set
[ 1130.551647] binder: 13724:13750 ioctl 40046207 0 returned -16
[ 1130.559707] binder: 13724:13750 Release 1 refcount change on invalid ref 1 ret -22
05:22:18 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
pipe2(&(0x7f0000000480)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f00000004c0)={0x3, 0x4, 0x401})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:18 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x6, 0x282, 0x8}, 0xc)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)=<r1=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xfe27)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r2, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r3, @ANYBLOB=',smackfstransmute=.,ssfloor=trusted#!lobdev,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf7e080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:18 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
pipe2(&(0x7f0000000480)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f00000004c0)={0x3, 0x4, 0x401})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:18 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:18 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x44, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
socket(0x1, 0x6, 0x9)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:18 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
pipe2(&(0x7f0000000480)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f00000004c0)={0x3, 0x4, 0x401})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:19 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[ 1131.290516] binder: BINDER_SET_CONTEXT_MGR already set
[ 1131.295987] binder: 13753:13801 BC_INCREFS_DONE u0000000000000000 no match
[ 1131.296113] binder: 13724:13799 ioctl 40046207 0 returned -16
[ 1131.309334] binder: 13724:13753 Release 1 refcount change on invalid ref 1 ret -22
[ 1131.310099] binder: release 13724:13750 transaction 1528 out, still active
[ 1131.384606] binder: BINDER_SET_CONTEXT_MGR already set
[ 1131.390129] binder: 13804:13806 ioctl 40046207 0 returned -16
[ 1131.397236] binder: 13804:13806 Release 1 refcount change on invalid ref 1 ret -22
[ 1132.138824] binder: BINDER_SET_CONTEXT_MGR already set
[ 1132.144533] binder: 13804:13810 BC_INCREFS_DONE u0000000000000000 no match
[ 1132.145072] binder: 13804:13809 ioctl 40046207 0 returned -16
[ 1132.153477] binder: 13804:13810 Release 1 refcount change on invalid ref 1 ret -22
[ 1132.158734] binder: 13804:13811 BC_ACQUIRE_DONE node 1538 has no pending acquire request
[ 1132.174405] binder: release 13804:13808 transaction 1537 out, still active
[ 1132.181862] binder: unexpected work type, 4, not freed
[ 1132.187256] binder: undelivered TRANSACTION_COMPLETE
[ 1132.193007] binder: release 13804:13806 transaction 1534 out, still active
05:22:21 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r1 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r2, 0x8, r1)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:21 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
pipe2(&(0x7f0000000480)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f00000004c0)={0x3, 0x4, 0x401})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:21 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000600)={0x20, {{0xa, 0x4e21, 0x1f, @local, 0xff}}}, 0x88)
write$cgroup_pid(r3, &(0x7f0000000440)=r0, 0x12)

05:22:21 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000180)=0x2)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10)

05:22:21 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:21 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x2000040, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:21 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:21 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:21 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
pipe2(&(0x7f0000000480)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f00000004c0)={0x3, 0x4, 0x401})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:21 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1133.579701] binder: BINDER_SET_CONTEXT_MGR already set
[ 1133.592343] binder: 13815:13834 ioctl 40046207 0 returned -16
[ 1133.607897] binder: 13815:13834 Release 1 refcount change on invalid ref 1 ret -22
05:22:21 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
pipe2(&(0x7f0000000480)={<r7=>0xffffffffffffffff}, 0x800)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f00000004c0)={0x3, 0x4, 0x401})
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:21 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x400, 0x80)
connect$unix(r2, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
accept4(r5, &(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000540)=0x80, 0x0)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1134.317122] binder: BINDER_SET_CONTEXT_MGR already set
[ 1134.323236] binder: 13840:13862 ioctl 40046207 0 returned -16
[ 1134.323495] binder: 13840:13864 Release 1 refcount change on invalid ref 1 ret -22
[ 1134.338537] binder: release 13815:13834 transaction 1540 out, still active
[ 1134.370308] binder: release 13840:13864 transaction 1543 out, still active
05:22:24 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r1 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r2, 0x8, r1)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:24 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', <r1=>0x0})
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000006e40)='/dev/keychord\x00', 0x8040, 0x0)
sendmmsg(r0, &(0x7f00000078c0)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="da82d05ad355f9346621aa3a58b69331ba877c7b1af2a15eb76c798bd121650c6d97aa8c0d6a849ee5d393c9413060786176820642b9b358d1900022958ddbc98f682f0c40d6aa92eca4a08be3e843404e59fb25630b7c315af4f3875ce7655b19ea828c077c269fd2f33cf485", 0x6d}, {&(0x7f00000000c0)="5c99deeb3ad47b565b018d95eee8ae5c0cdc173eaffb75eccc9e80817218677446498560b423dd9e1fd1f820d04e49b47c19e60cf17c00c9793dec5df4", 0x3d}, {&(0x7f00000001c0)="8519112ed97710c7a250f229e0e54703f4963689e503fd6eb249436b043686d933eca36953c470f3d1ed38dcb47ad1abb833ef000a9e1d70c8c8b5576e3ff828240b6f2d198038425bc6286551ea8bc178b6f016", 0x54}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000240)="ffc2b55625993b079a23cafa29e4d7b9b943c3bf9a0d34e39a67c4f9dd578d59d504f1ba23b2ef6291b621abc2691966e029231523d944631bd39bc02c9be31e750be6f46526de9aab2b8445ba43396594efa9dc8615fabd62ce3bdc8d120f2f287a9108fc2693bdc75b35c5cc797ccdbf3c5c588c4c56038057840dc8fdae183934c8af37580ce46aa155986b2e991562f6", 0x92}, {&(0x7f0000000300)="0a4f5a57c85ede41ad4d7c55e663e01385dda17401a3701a254db11a4e7e86def65df122fb6ec3af8d80564b8aca1154176f49174d0507bebc4ffef0cd99ed15c768befe5f84e51b2ab2de5028f53b64cb0bbccf526bfa4cbf2022b93e3cbcbf98cd988080705b5bf277", 0x6a}], 0x6}, 0x7}, {{&(0x7f0000000600)=@hci={0x1f, r1, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)="3d0ad0c0d84e7ba544901bca6b17409cef7c", 0x12}, {&(0x7f0000000680)="860cdfc3fce792985cc352484ec60f04e6e367eafa825f53929dca249b96781432a2364a811fb0aa202a83ff1bb816cd43118c10cebf52a0ed3479ad21ec918ea63e40099a267d358acd2044e4f837d950b0a7158b21e1123ab1b058ad98cb899abe0cc3da0cd148e7cd4236bb7686d98947a8253e7238dec84113d96ca37bd5c2fb3ecdd3fe101e8f8911e538622e47968ecf55b45dd71b8f36a955d754094dbaf25e63305b5a6d59a1c3d9c334e8efb9a83847a7e7338c0505f5f2db4abb662d396268be82f942daa0d3ca3a1b0ac9795a59d8", 0xd4}, {&(0x7f0000001880)="66af212f76dacb2f02bfa30e0664045b94bfa6848ebe3eb91b00f7315ec55efb269603e93fd9eeef35e435700a6b6eb576979c865632b514bdc430e965d8f6a4f56797a0e05b5df5387f77ec63118e4026aec762969e176437508ffbc296d7223002a5374cfdcad04f010bc0c369dba3bc4142cce5dbbb02f3849d62aa14ea80d5fde9ac61f131748dc0b490ba9b68c35613de21ca7dfa4ae5d81945ebba37fdf4445691f2c33bccd2645358fd3daebb4f2ccd48d196bba16ca25ce953943cbd0f7e136e2c10ea417e6f8bc93321bf1aa76dfa30f615f876c38bf7", 0xdb}], 0x3, &(0x7f0000001980)=[{0xb0, 0x10d, 0x1, "417e1cfe83bc4abd0792a73f6efaf3e1cd0cdd1f85a854c126fff6ffa88ec8d602513b225f6e6753c6737e938f4c85caafffc119003a9927c6a02c1c070334b818381c0edc3b8a154695e60b68405873412859b7fc13258c4e38f1caa642ebac5702c0a45ca43d012b001bddb68818a78c6329015c1497c5ff7b1c88e9d9ee39538c7a155ba29a8a5915e2421cbda31fcba75050df3447bbfdde3148940490"}, {0x60, 0x8525336143a9c880, 0x6, "32fa2801365a70279f8b3dfabb55f4de03bd61f50e7c880e63c60a6ae21e1ec756adaad9080fe3f16427bc8f4ea883a67b6abd284948aae366837a127148dc9e57532447c3922f17a1555503d155581d"}, {0x40, 0x199, 0x6, "cd46dba93000b896521480e6e9a35a70bb9b12ff1a6c13e2eacfb5dc0bd9b11e96c6e34b37e52e62d7d6"}, {0x50, 0x18f, 0x7, "bc0d62f1745ba7f3c98a79ef50eff3ed615180c4f60fc88f1b3b88c15623a786ada3901739f656002c22032be5b00b6507b1da5d94380aed225a77f6a9e58a"}, {0xb8, 0x13f, 0x1, "f5ee3084eb3f7456c8318e4354bc300cf287543cb1bbbf95aade57843464fea9c155b9e9c93a54379cea7439308d581e39b6d25d8bb0197d216a1c5674a1d4c62d5f0b84d1fa9e2c9ae5c3561453777b290a1ba3b5ce03604b90eb508c5726c01bcee60c8d7a6efbe86f318800498598d58446c0d13dbd1859e4337ae8d1d8d9c75a2ac78375c127c18a313a23c4f4622479d43fe6e0092c0ac8e048eb03ce845671"}], 0x258}}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, &(0x7f00000031c0)=[{&(0x7f00000007c0)="376b2b5ef0683795bec6aa452a478e356b7d4f038041cdcf22c27bf6bc490475928ac316c08e", 0x26}, {&(0x7f0000001c80)="2322acbaae870eb642d339cbfc8bd160a0ee06422eaf3ad70cb46bc79fdf6ff798a011dffb5b0d274d93c77afe6c0fc6754ebcfc897f34afaef4aecee521f917494edba6ea551957798d26de9238c7ea8f17e71571c5c61afb5ee8c4b04221e538df5e7ac2ff80eb869a2c9c38b7f4faa69830101a9af5b16bf394034a1b496e1d99215bb7491b32476b2022f2d881c06383284abcf346ace54b0f38796d4dc336374ac7e6554f698e8e8ddfa446df5288e8cd9efc72086a3967a26f58d58e6e5bb3a92b18cd01547849d9815f2382e34f0e883ddd35855d8c835acb80ef37164598f6c0d070debff1f4552b3744e0c6bf7f40983ec8751e0fd8c0be1c54cc", 0xff}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)="ffe1806c3ce2ad867104b4e5518483910decdf5c32537055f315422af7d69fdd6e6c483afe29c66e93a9fa7188f101d2e9bc5ea81189d6428e874b4e37a4e0a40f2dd840c62ea524e54e1c1b75348cb24f5ccb31d7225ee97f5a226185c0cc9f491162848864a06d07aea5f013a6016fb13005d6c50e83656a46374f62c93c03a2ef326326b329ad2973ce", 0x8b}, {&(0x7f0000001e80)="ca1d0c0304fb81c057bedc4cbbf0f0db468472c5a33896658c59e48aa437d70c10f44661d33b892cba7a89093666db6049c8078dab1f076a03bbe8c1dffbb2d96947e6b40ee2f3b8d469cf540ae398932113617c462fc94172246522b2fe1770cf872b9ba64367b67dedc2761be98373a2bdb79cb404efe1edc9e43414d492a4e337fd11a7dfdb29bd53cb69be18db6b28d9d8f71ae425e1", 0x98}, {&(0x7f0000001f40)="e6cfa9094535fc04a5d77398ee92fd045170a4b7b2399008553aaeab92caa411b049c645f3ede419a2b89c5686bc5ea1e5713ec72fe213c0059f9f6aa31eeabbe0fb1068c8ef7cd9211d16ef5003", 0x4e}, {&(0x7f0000001fc0)="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", 0xfe}, {&(0x7f00000020c0)="f2e608a65de9215b1b40", 0xa}, {&(0x7f0000002100)="2ad770ce3803c58c19db808f2274839b76c07ff229eb0362e911926355b71a7d98c35b31510bdbd17d019554b5804ad3eaa8286293a5a5961dad114966c1c81d7d20bad62997c2803f7a08ad7ceb8bcfb8a6d31298d4ef1dd2f01b1f52ddb8dd92d3fa6010e72b9db668147d3a5ad387f9a680a8695168c2dafd45f7f7cb5c9f6b166030f659d29d86abd0b2608bc1e3cd037bd96300ea", 0x97}, {&(0x7f00000021c0)="42dc86ab1b2284374d42a1e705a36548347da98cc55836df925160c32caadaa5654de0b114c8ff396242d7705141408106fe8347b2e84df9b39462870da89dba2b54f55c34925385cfd1c4085e7bfe6d79e91e3c57d897216ea52eeb2499e71a8487b3e02b47f8cfa714381c04aa02c195f40ad3b4c2e89a7b27817193cde154892c21ed19954bc087c5e517d01d05a1ade9e91215bb620a012361341f9cd61ca100f7d36a05b3e6b9912a82227fb73ac401996a41a61cc367bcc9ccf43f59bc13a6ed8adb0000732bdf71ec90276f70172d15ea285f1e4ff079899307620134fa36de8de95a4ed57958aeb55db34f9bff66530d9ad7692e99f683c66847cf6e1938d8c5fd30687dd313c5dee3a82f9b10f6e73aca207962b06a51329a68bd61c237925439b0e8ee6d9d34b0d785b73c37a34f9b9186f05824ab202e9528d669b5d745dd0b7ffd4bfd6ab6d29cd2cb72d6d3b42f1f8ce5e34d4d8f81b998cd885f3246a71e2c8750ee0fbe774984cf6bb9c27716bdb2ab243648de4fc1e06e998e5fb930aa928df9896076727299f44667f897d00c8a908ae0acec640597b713962cedf74078112dcdc56e22231f3c39ee93dbf0e66a03bed9a099d1df0ba1125604b758016c7d8c929fbf8f580e1bd94b351b712552c0806655cb754e7a3802d36ce52f68c1237a804185656484649688b0b72860d40277370dfd534c7a6060e566271b2b17f72305c38e4546a7c2d81b96246395b5d63b8f6ce7b5fcb6984bba63d3a0185cf474c3c1517dd051d0d1dffc9265db32576897d6ef9c73b282fd342f6fac3bfd9d51891b04f3cc1cd3a61c166306c1d9837925606aa0493f440d4f5c7ecf52a3c43326ef3494251ee0020509bf0b00550c19a14ed2ea21242934b899738cdebdec0e670eb830900161749711a76b19f78c408eece8841b10531f9b5d54cb635f105f5ba4b44adf040531fdb46944cfd8997fd3fbb092bc0b3ac1c0a2740738de39abd311bc9e7ce2cc370761d86c1bea06f9b31310525d3962a5066d233406711347454b6d9c92531ce6ebbd7efaebcbcb259de275a5023ba005968084212e14babc0862901fd303b524627fd069c248db5fe0ce8f83859f64d57e0920ff649529021a015877dc6b26af78cf4efc0036abe4ee4d5458dfd285cb08bd8a7cc02908d0c1458c4d4fc24e8263873d0983a42b36480ce16d3b9b8beddff4db60372956568cea3f4e4979da5404379748f0cc06749e7722cefce280a33a985df9bbe84379b7d6ffaa70d86061d808350512cf1610b9873d4e59676b174cddeeb2eb164289ab45be8456e6832af34f8c735749435dadea266ee3ad8c6464435b87715728888f9272fa168b76f38338b932b9e3036ff3b1607d7eea7c5a96c09282fea8e48f5a2a8583eb5180ca9d9d3d2fbf96fbf3f432af72334a67b212d9b4bf73fdf898ea0b0599c43f748f9972716a8b31d3935ca234702b74160c2919d7d2d540d46dfe9f5ee791a179b00b9a7a455225168f58e676a6f1156ef91c5dffb6bd23b02c2574b2b8dd44680d7bbfe6eb50c2a140debe99d8c8b02333e88ba368217bc830fad7522815fd73a683035870160e65e5c2739f3b04e1c494b8d7d7afa5e440c935eff4f31fcdb45fa0cdfe392b1351db50a773725cf3d5949147b57002af219f2bbe7b096b2d0e882dafe4af8c6e8f67e916e608c39af4d387711fde161b7d694de17f4b8dc4b0926e234f5cdd7d71cad7617d931e40bf2f8cf7c497efa6f16a7eace2f17fe05f146c3e2cab798be9737c42aea0943f711b27f168a18fcff65798a87c8f76387b65667c1d84970d7ccb949b9ec1a4ff0035320e79a949c4dda6a51840b052f7ab1d6d0185f3bddc3a88800ff1bb21f4467f1e2ecf80b6656d5cdbc58209fa0dfc59b79a58ea8288484e0e9a19b4f47e4aff8effe114000b7fa9a36ede6cdc7dd485b2b9f565b0fcdaa8ff8a5ad8c77ad3f2afa303bc0640107fe61aea7ca72a903d6406d4d8e551c82f168948d4c5a598bd1d2b49be6334e31220ddf4c235ab76391cce5038142ee669ac0d2bb7a5f61aed7c09101bd9e2c51b5229642f819eeff80a1eba0faa1c901be16fb07c2e0d67eb2bcb1d0b4420f729a0d60bed6c7fa29838c1fdd76705b7abf2bbfb3b58ebf7abf15bf117c2bc1494b83ac705861769646bb465c0ead22da342be17603d039de0a9c2048fdbc0950b5e0695b54d1bf2846deb40338d4c34d1580696bf9ace5242deff83849ba26c94b20592dd0da2bfe31d5b5e8e17b258618e8b38b55462c00f326b59cce87a2032591434def3690de371ff6a6c46d39fdb4bd7de09e0f289fd9f8a8ccba68569d9475d71ec79412adf8c2ae955e21cd068665cc1dc921524ac9a63bd91fb967deda3c94225182db3147c031699810474c1d1bab6bc7258de5ec5bf3671b4dd5ee141fe3541b5199d9df0d57a27293ec7878ef16468104532a8d0e2cd5ff4ebe6c50ad563d049e36d08b82905491e95fb48d0144968e1421333dfed31008788a5e36a6dc466686673255bd50a7d865124feaa9e428ba07beaf0d58b937bdc673c7b85c10aa424ee960b04f81ee10d4d8b6c6ddb9ab4f50d4a7f7b328330da7eb6b27d3af8169ff9e2bf800aabfc0f8515e8d761a6261d7ebee6d585fcee5d0e0af00a0b1aafeecfc8268b50f0f1d96446b4cef8d5d8ddf49f3ff1eba8b331237a45f48c8731018c10f7fe257d4aa7e00de9e8391893e0c0c1480e5baaa0bb4f79ab2ee866bcea8e6fdb47f34e401944e48c88bd7d36a3622c41145d1716a500ae1830b026923a47de9118ba25e76d8e865d6b9bd7fdbb880b4c41f49280673abeada2796e0c93a18397afa4bab3b0bc1afc4f52a92875e2a08a3301e7697d01a81c25c4d77e14577b30013025462e6ef251f096246a5d8254f02e6cf1e45f4b6d76270fcec4299073f40f909b3e986c821dea353d39b28cd9c1d72103620204762c4279c8063398a583407909ea36912aa86e7975510197a5d31a71226db92419ce229e672d3e86e2299b3a45e7c18bb14daf216b58b38baf71e88fdfcbb26e70a4bb63ad22f4d0780d2b321f36ff65f5d24b8b4b22ff54ceeef681aa19ec1474c0ef7b1725359fa3dea46ce9c15314b10736679eba1eaa9da147a1bf36ba3a763ea0bd9c71a0b0469e407eca5eea44dbfaef0eb90784c4447d1ca586cb6dd767cdbadd88513ee66898762a4a749d37a3240a64560021b84e1efa6d35b6492eaabec69177c25528f61c8d499b686df2c37ad6dc814ad7f2b641ef38a2da248c4f335025d7d983fa2044c5a8931b2226d3fc688c78de0a5b3843d7dcef8f297e328df34e05871c1f9492eadc6a22f8fe4d46408ce2a94947cb847072799073db74941533dfdeb775bc01a925eea8bfdd22c46c652907a82877b8b52eb6224efd06370fb9c690464996b36a0771ec193ddbdd805517a22f3e4ff33fae62f9b4b618730d44a1eb1ce2134ff9a27eba9e02fc4b2295a234a4f3867963a15b47cf5d05bb1251168c8ae7d129f23792999b01ee4436769679653ff0378ae931fb826489d086773fbb9494bb42a399ef2eab7ac15007d3716811ff2e76f321cb05c316e3d20d7120408f9194951149ad4ffa2eba337b43c81a25826a0a7aa56041681c0af42afd6ebb91b584cefc141f1068aaeabacf272292628e4662385729fa55e0d47675d6980b808df3e7e79290a04c447b81df9d767a69bcaac794d146e724a11a730b170af600c577cdb596b9a7ff652d642a3a9d3c610c66ea6d9a094df42c5349d33a2952981b1d8648506c4f8ed11bf16c4df3791c200b6ed56e6a73f18f691e56485c4a3bd5c1906d4999988adf5e86ec8395a383c1b62dc01b0f37deb8d01fea89c3e0bb861d22b4a9891cd281abb4dd7daaca183a58bab9d20344080ba6aaa8e3988a4ade4c1c6aa91f31617737d55cd29a3f0f6383b2c44db3dc42203bb0cb1ff9a608b4ddd3e3dde31e19741d1a39ab2b3feb2d32dc37d17f6889716d5af017b568cb6b21aa8944034a854416fa02e405f380d533a07482df8de7d078a59857786178cb26bd8d82ccc632f905dedaccd7bac4ceabed551d48dacef7024112575fcca360d83711303ab4dae71bf14f8c61e1e9b70667055870de344e997d8a0114203681502b9300b62c74c829bcd54b1933aed05ef46338e096cec05e0e3f71d40f99b1b3f64b3f9063713ed5a9aa38f2a691065a3202e6da0c74ff7374bacc614d1940c35f52afc4ce14007c3d8413916b08323fd3506bcbd719d9b8ba6ea40ef013aeeec2c12abf1c82e3e92600c086c8c999d28ccacca3d4e77aea4419fdbeb62122b27c54420751df3e6c5e466d539d9a8e2e41753e25b37c1e30306c5037b626bc562513c96a1a6a78b6a3d086911ba8bca3ab94ba4085ae0f159c72429f99873b18d63a64b18b08a821807909c08961a7411ade588890dd16cb1250fb0c674b5864bd36026c4208882a7e85db72844f0d6b53dd7171a2d0e4db46efbd48f2966d86027b2568d9881f0869a5ad9477af7de38983bcfb0c0c483e9e936e5799c1a1b84686f3d82cda49413eabb5ec3ecb437847c79127b4048cb1e0c0b42ff36b09d40fc8bc8ed972a1639daf5708c2597f2a30fa5bfcb9fb684a5078ae66298625b88723bdba5aa835ca2507611d2a111f1dc3312b9eb1abeb01406f5d0ac19d8b293fd563652db34501d6c7aea14178d7507298647ae50aaf5d56e8094d0e24b8b0e2ebfe5af83427d30dae161a4ff07f7610f7170e722610225e876911dcf9f5d80d55b4eca2fde5e5716f0c81affc0beedc23ed41f3ab4359ec9f72afc83e3f7b25f8c277a205fb3004bd7b3af7947e349b8eb66af5b376e31b953b443df070b8f498e1bbf7e7e6dfde2bf4b0c8c8ca0dfa855bb250aa01c5a1c01e0e0c42d63b700c50832e051227196b6a281b686c8f0d63cfcda723dc8b54950a818f9ea47b8a780245019c207e016d219518aa7170d967399ac3270b1fee9fc3783f44a9abbe31b18770812424209c92e215fae51a1bc00353881b07430996dc70b6dbc4156802c18e0fef8194ab7961039cc8f7bd2c25af70d92c27babba229fcbb813b37a2225c338fe686ede26a79755640638b014db7d674d1ede142b1bc072efede42373ab73390560f37231e0e32da75cb81a3daf889d41de729ff6e2dc2a3d2ae87431f2b3f203218a2a05af2104a576c80f1631d75f3c0352b9c54f53261b4eba34865f9d0d46e6919b4a22756ecfa931c4dafd8666a07fc835221ca8d3804e0a0485e37e7baf9cb813eaa81a86fb484f11ac994e06044d024771477d27374cc29c610d011d6304e5a102f088fd09c09f758fbeaa415e678676dbeb5142c853074ecffd01223e23074c49b333b27bd28332f7a2dbd94b8c0c3b78ef32ca3b7b22ca10f98302ed25d45efbf821a3cf9540cddf92a75939ca162555fa8556ea69d0786e9b388e27a90c46912abec553bac6c32fe1e152ef730d76591d1a2fc7cf9ebaebf08117fa99b12e9a4cfe6194d1ba27362d868df7c574fa78029d0d0659f0a57063f263d191ebef1ae106f3b7b22211fa7991149cf906e8aa9a7013502084f6cf0be15aa1b9443d9b36f4422e02afb9b5f736cf7e590c8a11eb30350e2d2a072019b7b644fec6df25ea27a8944f3bdc436a02a92fe52b720b15949e7ae2fa9e9dc4037e55b75d5e2f24e6f67f2a868b87c7ac6c44c1369f04b73467f4154fd8f39b7e18bfcc65692616f7edcf6932afa", 0x1000}], 0xa, &(0x7f0000003280)=[{0x110, 0x1af, 0x2, "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"}], 0x110}, 0x8}, {{&(0x7f00000033c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000005600)=[{&(0x7f0000003440)="eda6f42b83613a0cd06082b36fa1656ee1e38911aec1d8cdda6f8355118a1a8762858b2146305502763fd2a759e0635e199768b2a9593216e5cba01b485816d3df6724179e4f0e382444e240638accdc642cdf517f17ea", 0x57}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f00000044c0)="fa2364bde9dec928c4bb2bfb031e241b3a33f37b49797b2ee717a8c481a6caef2be102f0ef", 0x25}, {&(0x7f0000004500)="218edf806a48938c06ed1c6cc7711b13fbe117b25662f0af3bebbe591e0bc97cd2b9fd90036ea700b4be8ead7ffbdad5bc2c00a7c995ddeaa370decff8d57a127faaf654660bcbb2181c9852a5558d661cf4b891c6851b9fb5ba547c05c93864b193c0dd45d2633d007006a768769ed197d38339e0bbea11cc49e075782ea6a39be9f875d0b6854672fae0703a59f6083bece3f3172915927967de2a198aae9ae917369eda94e236cc353d0c72a9a5b3bab941d18083dc990dfcfb03d23baaffc788a54112258f0ce2843216c47e39b68570bdb302b4b92e955648e86ca7e241e83ee804fc530cd56ca0e94ea36c2c950e91b22c4dc027dd64b4c2f405ed7d5d0727d32674b1491c0e441ea4a2eb5d0b83af889299d65accfbd892898e321f7600ad101f7bd9c4edf265766ed2298488902b567a1e1bf9b05a895719b64b84c89894405c8120ef8e6da937efef60399ab8b60280da9794e4a8db17248a0e70ad84ccdc609c6e31ae027f37e7ebf37d867a4aa7742b07dc4fc2e8722baccdfd635a5cbf8f9edd5a18635a6f9fdb1ee5df35056a73869f847e71729c027904ea16a9297064931b4e3bcc784316e5083676bedf44aa51a4ef07ade52dab7174682642491ace6f1e5a208aa167677d02d986591aab32f1943bd8964e737cb1f827ae935ad7dce400519602916ee0f5f24799ab5233fe883dca5a899f1c7962523a710b9d3a6dad1272b91c28bb192c468336dce0beffe4ae80ece161dea1b8836d6066bee65c8316be5139ad4f5f1add0f73dc8a88430bedfebf115723604d9c524943bc265a99433633e34d04a192327a6bdf4158c1034b0f1b70709926cdcbc15b2897376dc96e249ad1c547df96a6216c8e9b7e33c28d1d6d99c0d955f2b46f4f4077dbaae2d307900d5095f22787a2ba8f5a0389247cc8fe89412a67755531648a2b5ad07e52529d9a0ac54158066a060b62ba37eaaeba04f521f549df1e6de7097fbd8a7db5e1f078b38d95210f4500fac582fa895a2f27696b17df9623a57570518f7ce977dbadd277bfadd6a801639a774eef05fa93cbfde0bc876aa48d30b0e1f00d926b73968fc6ab8e230805f52b4c6fbbf18aac7fb6172b8e55d6454bbe8221d02574bb63711477a31ff23af2d02472e9113d4453a88196bb06fd1ef8b1c58e849717c36a5ffaa5c7cd793260daf5e8741bc0209ae8a5420a8f108f8192b268cc724c671e5f8e153b122bd7450bb12ad044243a2072644ed611b61c22199fbafa0c877b10d2102eab7e773c007a97f2fac5db836219656a4c3dab4f3b4ed0b784a9140b35a8c03119c7aff0e91b8cab35681236fa78b12e4f50c8b3eed2e7c257a51b5cbc842c09e03c5ca5e832b1f3e8915905a3d8eadf3a631f73a05cb95421d8e3729382d90bf2fe7b03da7bdac4151b6ef54c206f7939b1c0beaa8c0adbe10b5335604341f6a290a01a4c10f58c42b18272207cbd721c038b2f483e451adfd94baa37211d7fa8902e5d9e656ab41264604c51b2e490289c47a0cd4da80057ea62d346e516628bae4e97c94ae4c317c161724c0a7c73081907eb3dfe156396878e7a3cc3a4bf6f5013476c6250b24c7bf33848803e30cebf7f8b3e03f10eade6027573cdc1c469b4212af9aca1e3c6e70b468c67f6717b48d0c080bca1f18c3dfc0f66af1e07fd7eb8162e7ca792bad0b92f7ca541e6ffe5890b198152f975a38cad08bfc090c5f672344289511b85e4c388f57d5d82fb94ababe5600e5bd5bb99ea12f46ddc06c105d903fb6043799da0e2fbd5ac4080482fe08d06d5aa43676d0b8f56e5b1d23f1cc6c90c4741c590c6582b82388ad5c0fe8824cbcd8009f79372ead40a53932c498b290dc040a439097314a338fc15cc36a3cdf0f5e69d893f0e1fc8719267d19dab3b449c9805517d2dd127a19ecc303c7e47ab3af2558235f80213b50b97101ffc168a6dd15420340d3054ee321446955e05ee8321d7c03656a95df7e250c0f9725c6275db1fea2b561ef5647dca66d219dbbe3b267addab76a6860dbd3ef57a319b76a5150d4c5d97f80cf229960d0d39a8e1e473040737d88e0bbb7df82abcce16caab223d99ddad1f6c0d97a27b12944ee2444b280c5fd35b06ab090073d1ac257c520821b13ffb04775eb91ab1114028d3b2e5ec8da8d68abb06c608303818fb19b20b12569e6884418435019af30a99b1cf9ee7e1ec83dc588b19c63265e6bbd5beb51163fc374ad5b444b6b2a0e9e8e361e11887ac9cf5edae2bfb90cf111ea7b50a010b7e8c2e8e41ab44278f483846207ea35987de71121d432e6d4a888f3d377ca4d7f55675bf85d20e223f673a5ca54daaa0cb6b2f4dd397c243a334c46fa29686380c87088eee207e9860c7bf0462ccc582bd723b3558f02c19fd9c64c08252e8dc50f78023fa16d745e0b82fb0d93b9c9bc7995a9ccc617aaa55799cf99430eff8408058cd3b893d77b6fad207d85809400f517be131774bc3a50c40f0c50a333353ec3b52772751d1335268c76dde451dc0a6ab227e5b38d2c840bdcf656db5a6bc247ccca205ab923b519a4d1327ae9f03a62844d2492b73cf3694ebcd5483aa6ae20039da86ae72dd4a47c9319471ab4d0f2bb7b2ba05bc8ca3e44826da7eb96aa871a22e2f732a705d17f452f9726f170ee2133f13eb60ee59557f88e50e69b2b360aa9cf3042cf66f545cbd41743749e02a7f1219ff58ad6874fb9c4986b314e00e674ae863f9e67025b956401fc6462b4f7a2055f21c439c0c5c9c681e43af8e99ddd32520689845489fb3d8d51dd5520b362e9226f642f6429d812e5cd0a9f7ee48cfe0a810095a671f1b6bf0254eeadd4faf8b4936e9125c47e3f74334962d47df5efbde1edc81cb7b1640e8deaafa72490fb51ccb03cfc80edc7b2ba2b4b8b39d4c1569450c7122a2426a74ed7e4b2f37499a306861511c457051c08c4d221336dc74c53e081e18d837f561e37ec5e9ac43dbfa801e03c799d15245b0a751878971cc6c16fcb476972e13682790f4647768375fac436c76c9ff654f10d89b4f674941aede6a880a241e6fc6fbec8e0bebc363256a13b1441212cfa4716f94b5dfc3c9cc9f41964cd6dcb5d1334f0acebd934579330a0518dbc4574b9e5274b99125647c81657be22cda3fc1a52121a0b72102926bf127837f1b58afca744a1291083db4665d7d52e7ea2cce283cd844c1df91234b45cdca0ab5a1a4fdad5678cb702d23aafea916bf13a87900a7d263a0cf8a15dcba41424dceff1c38d62a1e6d5fe6fbfd843380a14a7916f33c0e557fffc6c0bebfa86ab6d23162b56dd6186bc08612e6623359f49e7991cfdec80444ad27376a4b480edee36b28b5cfb91760d394ad2dd287ca3578176f0656537406e5a99e3557ba83dc04e4b9254c0cc0067d14ca9bfeddb98af0ad0552b600e021b075b47e15ff74d778a11a31deedc8e57272d503b55a7b75a7837bf2819a4b679ac985584226df72b15b6f3bdbc1acfdec0770ea9021fa6bd436c762ac3488f9a510c56bdbbafa6a11e8a9745881cb3daa252f89da458340c19090f9aa9ec924ab089662cfd278ef3171e0e3094b408eaa438a0abc6b87204ad568ea29fcd09921624a66460a05b32732ec298f41b036c5f0f3ad2102e0f525a31df18be2614dff86dc3df3c6d001cfa649bfea2a572460a7d6c91827c88522c357b09f4b26c7f70abdfcf8bf7a3cece1ae27fd26a763408b4514ec16c4251ecb4ad3b041022715f060b0fd9a95a7b0a4ba24bf09f1c11c4eefaba6795cc64679d137707c440aa1ad7d2bec1a232adbb13a5275c936bc9676b3bc9c2dd8abcdda8498f6c7990bc16cf2f4077cf44dc8ed3422440824bd3406e0820db9bd0d861983ff30403915344cb3b35607eaf9d024469ffdfb9bd13a54ef30f3e6de19dad8e49602646d8fa0d08f433b1f5895106502ff8e607e8dee77a7d7f81ba855a502a430edd708d3d324769510d5464b789673ba5fe38ef6fe9de4afe22936dff2e9d80e4b2ff8d139585be4d4a482fc4ed56e913c9d73698bb4ec3abb46aebb2e9ecf85982eec36b683f31c96e3317d27c6c10407181696f51ab4bca60f7f8ee566e256fa60c677ee556700552e6492243b0420fdceaf620e11ede4e37d3bdf20c697f6321489f087dc0cae53112f2ff8a92e3f0e89e80591b493e05e460fc2a46c80181a790ee3e4cde0ff05aa0bbb17f68f54510e276ca06e9ac47cd1b16d6438f38a76b80e0967d23c373c9095c2f23f3ecf0cf047b62affe7b2911091dba7d677fda0de1d4c46efd2042f67bd57baf409c283cb49df0275d3459db695ff198b578399dac7185673d0eafed78d5ab0143e80f19ad4f5da430e07b60a401b823ff820efe7dc3407c309bf6adc9348c89c5d3090176da3f769e1362a57e5438cdecf193006c21e712117bb0c3336e02d0e81d8d1d8bd967a418eaf871e037c538fb0ea01d8b137f94081fbc6abc2a6c0d1907197aa978b67e102880336248a36412c8f035e1bafe8ea4ee1abb47e0b86698682208a38e9985ea525d51b9651f24f5ace8a3451df0f4fb08c9fd983fca353947e3fc2dc4e6e2ae2cd16c9d02a8761c93f9654363d5d011f975e117961121e5cb394677a2a57567ee2b09956dc3cc377af4c51fbe863a72ad4cdb53a6d8de228ecc7d69ab3c2faac6f3208138b323f8c00891dd70a4cf46adac192035dec4dae9b8cbe97fb1e36f5dda3bce5137333136ec12aaf09428ef7650ea1041040c9dff61c8bb91789f6f3fca549f56d21ad336095fda70d7387ac1c5582ecf6a98fdd5d79ae93b09619f90fd6b588dbe2d13e6fb0d9ac90bbf0d69e84cd697b12c64a0fcd90ceb0d5ddef6424fd8bb59098e0dba18f7bd0e3c2c6d62d8532725fa5d2692c76c8a663d5250a285a70adaa55ef1eb00cc1ef6d8b7a3c080699be17b35461e6a1cb46fac40b579b1f67686386a98ede0539cba3d52a38fb7a5cf4658b82c60e45b7444e4ae602149af19927aa158fc81e5702066404d1f3e0c84f856b03853834568c9df687881bdc77dfd90efb4366d5ba7e81a3f9b11a3ec32a81c193de0fb18a7779e6b9e6ac72ff6895e0d824549bc7fece5b6d326e387fd753b203205e08e0d9082a408976a07dace6b7c67fd439d700065cfb236463a1b0612b6fb62bdedda98347cc49d3ea8106810113773841c6e9236703f7e7640f39ef2052300984ce87d4c9f78ca9c4e9ecbb0be739f7aac4d573de9d5a41b8455451eec970f20e33733ac5f9f02d13c9bf502fbe026fee953ac87b90323d5e3a9dbb2c2ec1f76da33b30fb3b025a0b83ec4dc89e553998d9c5877cbfd1025ec6283af3f740387591a0aca55e2d6e1f049235921a852529f5a02f9d2c91b793a67703ae2c35190007f060ac8ad9ed8a31bb9edf398eba8a1466db4e8327629ed91b326d8c3a05432328a964700f7bea684b8b4a01293345efe779987d17f825d41187f2946d8bcec61f544c3d1ecbc514bc9bcb6250715af1438133fe0d3eb10d0a8e0fa38d566fed9afab2cb2e2b77eed3f0ee2bf9d403e9299eed228ddbd6486e53309d9f35cf3de5201944a6b3cd78836d038f145ab88e1015cc2f062daed529b59b0103c4b0c14dcc67db43a336256701844f5e6d991ba6fae6e14e721a09724e2e8d38b0029f2c54c18b67e7c63a1c6ffa9bde9aa3fe5e2c069abfcfc48795b397d86be50848afa376e0e4ce8e1356c11ace99d0b4467463727c8cb3a192643708fb47fceed0597554a754eb2840", 0x1000}, {&(0x7f0000005500)="ccdd42daf0747bdbe892e08749496ef241203086d00e2ae6a51e46ca073ca1dbfc6a3f3f0ec7fed39d6c8ad7dfced60d11106fea893d325f9b92b2e9bffcbc9c815c8be3d0cc83591e31fe93149a279f519b85c7e68e3a08bc1aeab690e61889520a6310ee6e3ef464e66cefa26f9584cc3aab5e7b630f57d4ce00db3fde4f2b55f23bfcce0c408d4bb3df33a5cc367123ee1c3b92973a5555a6a6aa5abce07b1ad63d9bb0c8a9c88b3fa644e78792713b7a3d4a439eeec630b439f4208b7462a5c57a76ecc39357b872ccf700293dc22aa463692ad32824924484b9b042a09ad1cf15aadebc8e40d1219c14e365458b8bc1a7", 0xf3}], 0x5, &(0x7f0000007a80)=ANY=[@ANYBLOB="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"], 0x400}, 0x800}, {{&(0x7f0000005a80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000005b00)="2064ab22452cf2564b62e9bde7d1a84ec2187153b7e5c4fb6b864f87e29af954c28dcd128f4a40803a0f3a41f337dc403277dcdcf3c389eb272c82882e411c32c8e287fa7df681d35db6560c920397c9f1eb8f62a605927ee642319cf921db4347d33f1feea801d757ecf39edd7bfa72ce0dbac37e7403c4d7a586d93cb84f89928926c6ddfa02795067e0", 0x8b}, {&(0x7f0000005bc0)="9db5", 0x2}, {&(0x7f0000005c00)="9292f89507c0670bb9e866b1c461e48d6b0dfd40b539c66b057180905adccd24772556054b5224ba00341ca26c31313c6a86cdc99172168fdc31a011c3af67c26bc46c7bfc41723276ac334ccf770060cf09efcb30d2f51af868fabc287d847bde8dd047f0199881ba9b5dd8350a5436c99a5e0b27ab7f7490d17a63a0f222a50e496f962c6745ed5734edbc4b8e391f0ddf82d4f935d2649db925fb23ad4568cf439c05c76f108752fc88a459e95099a1e0f6928acda9a1443b0686057742f9fd760e2c6e70144e195340b21c35cbe5cf6b1f1387d7c6cd2214706d805059efeb0f5fdf79b44ba7bf0a021fb99e07ef4282c27e453d87", 0xf7}, {&(0x7f0000005d00)="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", 0x1000}], 0x4, &(0x7f0000006d40)=[{0xe8, 0x29, 0x6, "37770ece3ebd6d8048e8d3dbd1c83b72c8661370f22f97c2104c1fd2fd81e9256c50f8acf4b48bc60bf6f2f4f2614d05817eab913954e089717fbdb0d450511d19f7c180d7d684018086023d17e007f1d1ca9771bef1fb6415cfe41ca0ac209894cce22d28727565ff4b0f1f465e66c7f71fc8f653064d4a5e804ec5f71cbdb4a5743b32f158e2f69b8a4487ebc1ffdcb90e6e0881d3deebd6617202cffcea2fd8f9c5dcb87b159ff0ce7d2d3f1ea4dcd610a6834d71109641914d7a7264b2ef4a1af36fc8a064b130a3554e0958859b92901ef6"}], 0xe8}, 0x9}, {{&(0x7f0000006e80)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @local}, 0x4, 0x4, 0x3, 0x1}}, 0x80, &(0x7f0000007100)=[{&(0x7f0000006f00)="02cd1e4ca0d05b4d52b0ee1dca9b6d4af7b4f7219e4fee4a02cae2e9c6f1158042fda17c3458219947708c01d266b77b445e972fb267c82dbc26029c9cb0e8d4b3972634924022ceae6e0fb7360d5c66295da5c59a7a9b4dff53e346e4f888e46b56e8fb76f246570c1753060406dc", 0x6f}, {&(0x7f0000006f80)="7ce094730d1ae0", 0x7}, {&(0x7f0000006fc0)="53fc4c639a0c88e378eea89130409035b2debd8702589c8777b5a3a61a737e4ab65b5deeb3ca5345f8", 0x29}, {&(0x7f0000007000)="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", 0xfa}], 0x4, &(0x7f0000007140)=[{0x90, 0x117, 0x8, "864796367220e197604623aeb9befd1bd80448212876b42ed4de9c42bd901575145e409a66523b1ecd12069b76dd2a40835f32e2c7cf9a2ac33ae95d373f260426e182c0d293fcd55173a15ff7d50fcb4f0d094166c5bfb154acac5413f0c5a2fba7c103b6d7a50fb3e2646db979683faed9637128e2787b356b1e819421"}, {0xf0, 0x10f, 0x6, "b38dc891a40dbaa89e5b232437cf9216077d3d7bb1c3b9bbe214bdfb52e57335a7b7a203765aa0c166e8c837ae055e1e50413d14217eff52cd4dd013620924d7adfdf2f967f32e61bc6faa53db39ca05ee42aa18dfacb373ac8892c1388f39fb8414a6ee5c53c1fc0035a7e8968a861f749aa267fca0d030e8221e98bdae9582a7f3ed76285cee3b73d46f430d28b977edafb44d28b596b40e2254e4dd943591956fb907ef3e0af3b0829d42b9890ee36b5e5e47b87933642d981fe7a9976b75b59d41849fb8952ed9ce7a267a2ff48d43adf00c19feace71df4a73e2cef47"}, {0xc0, 0x129, 0x40, "1c8b09d057d5f91f0d632298b03974b9dc021fa08fabae187de07d1f6c5402cd62856f922896352cdf97f5069c856f50812284d6fa13b3c6188924030b569175e769ce0c728615b308393cfa81f765c21f2b95edc534f4a061316f2340680616764f93a23762df9a33679deb76c883840474b18f8eef46aa3b9a483127e7f33c991ec9ee8caeb7dca6ec44dceb6789176e6cf185fa04776809dae6d7ce4a58c891b794f08e09d661454b7b4fec79"}, {0xb8, 0x1ff, 0xa4, "7c55ab5c2335e72f5ce1178ba8746486e7a50a4f3a761c25f1bb8238f9dd00bb52e0de3f0a80e5e0a5eaf7c014b52165b0999a118cee8ad09fc5d8fbc8bf213dc966a3a476231d698c63d4624264deaff5417521117c2e91a44634003aa26d95046080d49e7d16ec7cd8cfd1b23e5e623df10050d81fd527cf89fea6017beca0366c614420a52eced9eaead855c2c04b27b9e3fba128c9ce3bc5ebee5561e29dae22646fe0f78a4a"}], 0x2f8}}, {{&(0x7f0000007440)=@caif=@rfm={0x25, 0x0, "e138b0f10b7df5578cd4bb09de8b0241"}, 0x80, &(0x7f0000007840)=[{&(0x7f00000074c0)="29bef8969b179b1d9af33b213f492c6f1ec56e23f3e14986d959ac811303f95745b6daed48e1f32206c584b1fbe3bd6b92d0ef9f5789b67ebdcd3f1d9ca6fd93ca484261e00c8fa6e038dbd68bb0a3148cde1c4c1d722c29c4d5188422918bb2201bfb9979007661e7fe6e5b0801d93234e8246573d95311ff3ba2d7f9555b8c09eb14061b5d9b3439e5dc2559cb6dc813c40220687e50588c6fda764a1e7a992dd2c2553f9bcbf68a3bbf", 0xab}, {&(0x7f0000007580)="6efdab81b985dc6ce68d938510e240cd36e5c3f6232bcd26b4b083eeeed41326b63b58c41c9b6e0dac92182c329a2511bf0bfcb983", 0x35}, {&(0x7f00000075c0)="961e4ce3172bd9c230ff242da0ab30986829aa4013d10acee61eea15eb5d28592a5a60ad8717ea75050ec3b3e3fca1f2a8100404c14794c65ee078580268a5ea470ba604ee994747f899b87626fd2db1e70a98555926e85ec2579ffa6ddb161f0d3b82327ecfab8beda7ce65917388c8ffcb40ff01ca623a687fba7822f93784fb439830c79d7e2609f3bcfa01d268c3593ef39e925eea12d73a787f647351eca8dea603f79c2119721c3caa93915cc6b9bf69211439077056163d774be9c572cd8acfa995cc31cd5774762e8e14361edbd5766f1c648582f582b2cce6691f777e727b1d56afa718", 0xe8}, {&(0x7f00000076c0)="e434ec9170ca2ad3a1587a37e889f8a0367311dde32fbd0e46bed7e15a11f9ae6a4f88dbcebc349b62cf9403a993e23e8390dd9d30e840498067e25b0974e799d6b522ca8a9d4bff8f7c6002d54e5bd084ff0ab684ee4a39ced2fd0d7fb5b4425bf5b08a095a2703314f061a2eef45bc443a6a6489f9a1aed73791d7da69404df78641971ffd983ec423e122f4371766c7fb2d8b23e59abf7b2141138faa8745289c15db80", 0xa5}, {&(0x7f0000007780)="44b1daa1777e4ea996e849b35ce65f04774f8e41a87e6a0a681ebbfd076b66ace62193431eac3d657f0b749dec6d99f744f7a0eaaa85e3f459c3685bf19c9160e82db75dbc7f778f72c80714ac7fc2d3e5cb25665eb52a6ad7315a4272897dad1ef54f0403a5d3eabaeb4f492da4040fb0c7b146a4b09cbda256dc902d3cbc2ce9bd09f65cf33fcc70bf8e24a6c446705afd5bc971a63f63f7086d4a", 0x9c}], 0x5}, 0x100}], 0x7, 0x40090)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_wait(r2, &(0x7f0000001d80)=[{}, {}, {}, {}], 0x4, 0x7)
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlink(&(0x7f0000005780)='./file0\x00')
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x6, 0x1, &(0x7f0000000500)=[{&(0x7f0000005680)="2d6b97033a8c9ceb0efc2549a3044bd5a4932b0a5c1f39390d7aedc325dee3a484d37fca547a210d7e6eb8707ed035bd27b27ed6f81b4c5b498fe22891f82711decd7b003af89ff53d1456ecef751356444d15ecb9db54d8a381b2bd", 0x5c, 0x81}], 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c6f626a5f757335d3c6f95e22a54f5f61636c5f6163636573732c6f626a5f726f6c653d7465616d30002c006189f2ea34839ce4531dc4d478a780af48d770e80eebef17f3927913ab56c560dc356299a22bc2501f82b1"])
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:24 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000540)={0x3, 0x20, 0x1, 0xa271ee2, 0x8, 0x2})
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:24 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:24 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x803)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0x2c)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:24 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f00000007c0), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000680)={<r4=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000780)={r4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r5 = dup(r3)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000800", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000680)})
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x200900, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @rand_addr=0x101}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)='ip6gretap0\x00', 0x2, 0x7, 0x6})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:24 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x803)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0x2c)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[ 1136.545012] binder: BINDER_SET_CONTEXT_MGR already set
[ 1136.553753] binder: 13872:13876 ioctl 40046207 0 returned -16
[ 1136.567722] binder_alloc: 7496: binder_alloc_buf size 2251799813685280 failed, no address space
[ 1136.582889] binder_alloc: allocated: 5280 (num: 165 largest: 32), free: 7008 (num: 1 largest: 7008)
05:22:24 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x803)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0x2c)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:24 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x8000, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000580))
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x329}}, 0xe8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000001}, 0xc)
connect$inet6(r1, &(0x7f0000000000), 0x1c)
stat(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0))
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
io_setup(0x3f, &(0x7f0000000100)=<r4=>0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xffffffff, 0x80000000})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000440))
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000240)={0x3, 0x8, 0x4, 0x9bd, 0xfffffffffffffffb})
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}])
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000003c0)={0x4, 0x8})
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3)
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
umount2(0x0, 0x8)
symlink(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0x88, r5, 0x306, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5fb457c0}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040014}, 0x40)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e)

05:22:24 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0xfffffffffffff7ff)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000500)=0x949, 0x4)
fcntl$setstatus(r3, 0x4, 0x42000)
sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0)
setresuid(0x0, 0xee01, 0x0)
ftruncate(r2, 0x7ff)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000680)={&(0x7f0000000440), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}}, 0x800)

[ 1136.601550] binder: 13872:13876 transaction failed 29201/-28, size 24-2251799813685256 line 3135
[ 1136.614715] binder: 13872:13892 BC_INCREFS_DONE u0000000000000000 no match
[ 1136.623793] binder: 13872:13876 Release 1 refcount change on invalid ref -2136997887 ret -22
05:22:24 executing program 1:
mkdir(&(0x7f0000000480)='./file0\x00', 0x46)
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:24 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
select(0x40, &(0x7f0000000000)={0x39, 0x3, 0x2, 0x40, 0xfffffffffffffff8, 0x39, 0x7f, 0xffff}, &(0x7f0000000040)={0x9, 0x3f, 0x80000000, 0x3, 0x1, 0xffff, 0x3, 0x80000}, &(0x7f00000000c0)={0xed4, 0x8717, 0x1, 0x9, 0xffffffffffffffff, 0x7f, 0xffff, 0xc37d}, &(0x7f0000000140)={0x0, 0x2710})

[ 1136.694805] binder: 13872:13876 unknown command 0
[ 1136.700805] binder: 13872:13876 ioctl c0306201 200003c0 returned -22
[ 1136.702298] binder: BINDER_SET_CONTEXT_MGR already set
[ 1136.716490] binder: 13872:13907 ioctl 40046207 0 returned -16
[ 1136.805764] binder: BINDER_SET_CONTEXT_MGR already set
[ 1136.811310] binder: 13911:13918 ioctl 40046207 0 returned -16
[ 1136.829327] binder: 13911:13918 Release 1 refcount change on invalid ref 1 ret -22
[ 1137.589602] binder: BINDER_SET_CONTEXT_MGR already set
[ 1137.595570] binder: 13922:13933 ioctl 40046207 0 returned -16
[ 1137.605467] binder: 13922:13932 Release 1 refcount change on invalid ref 1 ret -22
[ 1137.616425] binder: release 13911:13918 transaction 1547 out, still active
[ 1137.650242] binder: release 13922:13932 transaction 1550 out, still active
05:22:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r1 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r2, 0x8, r1)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:27 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000000)={&(0x7f0000000480), 0x7, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:27 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
pipe2(&(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:27 executing program 4:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0xfffffffffffff7ff)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000500)=0x949, 0x4)
fcntl$setstatus(r3, 0x4, 0x42000)
sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0)
setresuid(0x0, 0xee01, 0x0)
ftruncate(r2, 0x7ff)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000680)={&(0x7f0000000440), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}}, 0x800)

05:22:27 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x18}, 0x10)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:27 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25084000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:27 executing program 2:
setrlimit(0x1, &(0x7f0000000400)={0xf43, 0x401})
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000440)='posix_acl_access%^!\x00', <r1=>0x0}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, r1}, 0xffffff75)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000600))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000a40)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r2, @ANYBLOB="2c6f626a5f726f6c653d73656c6647504c63707573657cd6242a747d76626f786e65852da3d97f8d9869269f4f659343f84ac5643ec8906c4450c4afa69b9a85dae12b391291e9e8e55043a4a5f640f085b98f1f971c20c7e8a6a45a4876", @ANYRESDEC=r5, @ANYBLOB="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"])
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
fcntl$getownex(r6, 0x10, &(0x7f0000000340))
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in=@local, 0x4e21, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x8, r4, r5}, {0x0, 0x0, 0x1, 0x1, 0x3, 0x3, 0x100000001, 0x2}, {0x1000, 0x100000000, 0x8, 0xe55}, 0x401, 0x6e6bb9, 0x3, 0x1, 0x3}, {{@in=@remote, 0x4d4}, 0xa, @in6=@loopback, 0x0, 0x1, 0x3, 0x20, 0x1ff, 0x1, 0x2800000000000}}, 0xe8)
setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000380)=0x3fffffffc0000, 0x4)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x10)
write$P9_RGETATTR(r7, &(0x7f0000000980)={0xa0, 0x19, 0x2, {0x180, {0x0, 0x2, 0x4}, 0x2, r2, r3, 0xfffffffffffffffe, 0x2, 0x1, 0x9, 0x8, 0x0, 0x8, 0x1, 0x9, 0xb, 0x80000000, 0x8, 0x0, 0xc5c, 0x800}}, 0xa0)
writev(r9, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x69c280, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000880)={{{@in=@remote, @in=@local, 0x4e20, 0x0, 0x4e24, 0x3, 0xa, 0xa0, 0x20, 0x4, r4, r2}, {0x224a, 0x0, 0x5, 0x4, 0x7, 0xfffffffffffffff9, 0x0, 0x3ff}, {0x5, 0x7fffffff, 0x1, 0x400}, 0xfffffffffffffffb, 0x6e6bb5, 0x3, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x7f}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3504, 0x3, 0x0, 0x6, 0x6000000, 0x5, 0x2}}, 0xe8)

05:22:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:27 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1139.640892] binder: BINDER_SET_CONTEXT_MGR already set
[ 1139.656489] binder: 13938:13965 ioctl 40046207 0 returned -16
[ 1139.674904] binder: 13938:13965 Release 1 refcount change on invalid ref 1 ret -22
[ 1140.351284] binder: BINDER_SET_CONTEXT_MGR already set
[ 1140.356818] binder: 13972:13986 ioctl 40046207 0 returned -16
[ 1140.357072] binder: 13972:13988 Release 1 refcount change on invalid ref 1 ret -22
[ 1140.417921] binder: release 13972:13988 transaction 1556 out, still active
[ 1140.431710] binder: release 13938:13965 transaction 1553 out, still active
05:22:30 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:30 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:30 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:30 executing program 4:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0xfffffffffffff7ff)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000500)=0x949, 0x4)
fcntl$setstatus(r3, 0x4, 0x42000)
sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0)
setresuid(0x0, 0xee01, 0x0)
ftruncate(r2, 0x7ff)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000680)={&(0x7f0000000440), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}}, 0x800)

05:22:30 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tgkill(r0, r0, 0x3b)
tkill(0x0, 0x0)
r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="ec3034de62779e26a2e6dbc69bd15d3f431fb13f793d577a5b9237f121662e078c9e23b66339e9627bc1932e7bc0eb8fec9dc74713a6d4852e47caf89b5076f6aea63ddca858654cf918c077df4fbfede199690ec4f9168778b0cdee2ed2f771d6115351dc8a1338c5d2a6dcc4c8554d059502f15f91b1cd26cf2a94fac17fb946821ddad2ebcd", 0x87, 0xfffffffffffffff8)
keyctl$assume_authority(0x10, r2)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000200)=0x2)
r3 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'gretap0\x00', 0x101})
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:30 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000a40)="c708b1c4612c53c4603546bc5dad3b7f05135691cefddab41e68922c89a5ca048f90346120ece1e6ac3cb3f0f94b449ccfdaee80ce23987d366c3415a8d7fc49079c77e712e8a52c842bcfdd9c7101728e2b8dfef31cd20151c8b4712159b23e79ca48794c7bee5b2a54bb4e00952d6b203cf4d7290af83e646b910cda4dc6bd4264ab9784fab9f19690b95e1ae2444fd7c1e510f2c04f1cef6326596abf1e19c9b9047cc8b97f61f61d0ebe7c9888ec213f11e21bb4e8f6f3cc4c1f38e34683a094f6b73a38dd0a7e42b8ae20", 0x0, 0x2}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
getpeername$inet(r6, &(0x7f00000004c0)={0x2, 0x0, @empty}, &(0x7f0000000640)=0x10)
getsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000940)=""/208, &(0x7f0000000480)=0xd0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:30 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:30 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:30 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:30 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r3 = fcntl$dupfd(r0, 0x406, r0)
clock_gettime(0x0, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r3, 0x1, &(0x7f0000000540)={{0x77359400}, {r4, r5+30000000}}, &(0x7f0000000600))
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x2a, "8632c8d5b80b0a0b0e9577bdc20fd6e6f42f018a4745f12145cafd3671305938ef8fa5dcd8e603b5aa33"}, &(0x7f00000006c0)=0x4e)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1142.696822] binder: BINDER_SET_CONTEXT_MGR already set
[ 1142.704756] binder: 13992:14016 ioctl 40046207 0 returned -16
[ 1142.731439] binder: 13992:14016 Release 1 refcount change on invalid ref 1 ret -22
05:22:30 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:31 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x11d42c107d0ba8cf)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
write$UHID_INPUT(r2, &(0x7f0000000880)={0x8, "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", 0x1000}, 0x1006)
tkill(0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0xd}, {r1}], 0x2, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000140)={0x3f}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1143.418997] binder: BINDER_SET_CONTEXT_MGR already set
[ 1143.424930] binder: 14028:14028 ioctl 40046207 0 returned -16
[ 1143.425169] binder: 14028:14045 Release 1 refcount change on invalid ref 1 ret -22
[ 1143.440912] binder: release 14028:14045 transaction 1562 out, still active
[ 1143.460527] binder: release 13992:14016 transaction 1559 out, still active
05:22:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:33 executing program 4:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0xfffffffffffff7ff)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000500)=0x949, 0x4)
fcntl$setstatus(r3, 0x4, 0x42000)
sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0)
setresuid(0x0, 0xee01, 0x0)
ftruncate(r2, 0x7ff)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000680)={&(0x7f0000000440), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}}, 0x800)

05:22:33 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
clock_gettime(0x0, &(0x7f0000006ec0)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000006cc0)=[{{&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000540)=""/62, 0x3e}], 0x2, &(0x7f00000006c0)=""/176, 0xb0}, 0x3}, {{&(0x7f0000000780)=@tipc=@id, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/134, 0x86}], 0x2, &(0x7f0000000a80)=""/38, 0x26}, 0x1}, {{&(0x7f0000000ac0)=@ipx, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/9, 0x9}], 0x1, &(0x7f0000000bc0)=""/88, 0x58}, 0xfffffffffffffff8}, {{&(0x7f0000000c40)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/122, 0x7a}], 0x1, &(0x7f0000000d80)=""/179, 0xb3}, 0x1}, {{&(0x7f0000000e40)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/105, 0x69}, {&(0x7f0000002f40)=""/197, 0xc5}, {&(0x7f0000003040)}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/139, 0x8b}], 0x7, &(0x7f00000041c0)=""/4096, 0x1000}, 0x3f}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f00000051c0)=""/147, 0x93}, {&(0x7f0000005280)=""/198, 0xc6}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/156, 0x9c}, {&(0x7f0000006440)=""/252, 0xfc}], 0x5, &(0x7f00000065c0)=""/84, 0x54}, 0xfffffffffffffff8}, {{&(0x7f0000006640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006ac0)=[{&(0x7f00000066c0)=""/253, 0xfd}, {&(0x7f00000067c0)=""/219, 0xdb}, {&(0x7f00000068c0)=""/170, 0xaa}, {&(0x7f0000006980)=""/195, 0xc3}, {&(0x7f0000006a80)}], 0x5}, 0x9}, {{&(0x7f0000006b40)=@nfc, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006bc0)=""/180, 0xb4}], 0x1}, 0xffffffffffffff01}], 0x8, 0x40, &(0x7f0000006f00)={r3, r4+10000000})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:33 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0}, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x214400, 0x94)
timerfd_settime(r2, 0x400000000, 0x0, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
write$P9_RCLUNK(r2, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
fcntl$setown(r1, 0x8, r0)
socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5eddce26e8c2888b0efc77dcbd7407faa1aa228981f426132c142ea060062d74cc2cccf57a7b7ac91437f815b629c96f1201775dede55400889de64bfda20f132bb2f67673944c6420a6468d265e30147e72f71387500c150937db3608a746f966e765806bd91e14a83ffddaa6ae060c07ca2f52a799544bcec1d734273e767413c1816b85c2d31b0e3a928b855fe394c6c3ddc9c3bfd277dcc55dc74cf017587cc0b24c92e9984a49826a92aa4ccf8310cf166a65e78b59714825c8d1710a3be12e0c5ba1841725eb0c432fbc2afb42f9020e619", 0x11b}], 0x1)

05:22:33 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000480)={0x4, 0x66a4, 0xec, &(0x7f0000000940)="f345507efeb146e6d2e0fd86199a31ee941fdbda430cdd91c126d4becf8b58844d9c9be8636fa1ac63163773611528b140cb892b8be9432557035664bd610f18924948195a179a0dcd5ae3a403f35d337693fdc526810f4a342709d2370c3175278ff2defec4d1340b98b79e8c9cf5853463b3ce6e6093af23034daa45082a209f0c41972b2cc90b61c2c44b019e669337a4387bb7f06c82beecc2732b941cae8fa23dde59e9f13384daf3c6942ab552b844d8f6093cdbae38da4e90c8b5957755c7022252aa85c86f987ca8ea405198de4ed0e5e95fb2339c5a8bcd2f80fc1596b7f1d8f37c9b4614b6b0f8"})
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='/dev/snd/timer\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000007aa30e83aa0000760300"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6)

05:22:33 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:33 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
prctl$PR_CAPBSET_READ(0x17, 0x1d)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000600)={[], 0x9, 0x9, 0x75, 0x2, 0xfffffffffffffffe, r0})
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe0, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x19}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x32}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1145.726356] binder: BINDER_SET_CONTEXT_MGR already set
[ 1145.733548] binder: 14051:14076 ioctl 40046207 0 returned -16
[ 1145.744139] binder: 14051:14076 BC_INCREFS_DONE u0000000000000000 node 1566 cookie mismatch 0000000000000000 != aa830ea37a000000
05:22:33 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="bf17f2318046bd18833b2907bcce30d5fbd10f4a6a3f0be4935283bc12eff3")
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x20)

[ 1145.777165] binder: 14051:14076 unknown command 1986356271
[ 1145.787077] binder: 14051:14076 ioctl c0306201 200001c0 returned -22
[ 1145.799844] binder: 14051:14076 BC_ACQUIRE_DONE u0000000000000000 node 1566 cookie mismatch 0000000000000000 != aa830ea37a000000
05:22:33 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00')
accept(0xffffffffffffffff, &(0x7f00000089c0)=@hci={0x1f, <r4=>0x0}, &(0x7f0000008a40)=0x80)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000008ac0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000008bc0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000008c00)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000008d00)=0xe8)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000008d40)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008d80)=0x14)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000008dc0)={0x11, 0x0, <r8=>0x0}, &(0x7f0000008e00)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008e40)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000008f40)=0xe8)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000009000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000009040)=0x14)
accept4$packet(0xffffffffffffffff, &(0x7f0000009080)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000090c0)=0x14, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000009100)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000009500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000094c0)={&(0x7f0000009140)=ANY=[@ANYBLOB="50030000", @ANYRES16=r3, @ANYBLOB="30042bbd7000fcdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="78010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r7, @ANYBLOB="7c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000004c000400fbff4000040000000700370006000000ffff050709000000000000090800000005000907f10000000000000500200000f30c5305400100000100006a0300000002000103030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="b401020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004004808000008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000101000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080001000100000000000400010000000800070000000000440001006d6f64650000000010000000000000000000000008b14d998300030005000000140004006163746976656261636b7570000000000000000000000000"], 0x350}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000380)})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000880)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r1, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r13, @ANYBLOB="2c736d61636b66737472616e736d5b74653d2e2c7365636c6162656c2c736d61636b6673666c6f6f723d7472757374656423216c6f626465762c0023f94681e4a3ab88954359c87d7b7457efb86f1868b50c0c136dfe1b6b5ced4aff1a444bf12acec2a7d99ea2b25cc2a6ac0d27d7d455f3909d37d5687875207fe1c63afaa58af433fe0f0e02147200b2dab87124eb94ea30ee253868b996d37693fd998bd501b4743fad7bf9a3553a25ca6b1cdf35f7f3c750a7ea3ef648a82a6262bf0019f74c899409"])
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r14 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r14, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r15, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000640)={0x7fffffff}, &(0x7f0000000680), &(0x7f0000000340)={0x77359400}, 0xfffffeae)
r16 = socket$netlink(0x10, 0x3, 0x10)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='trusted.overlay.nlink\x00', &(0x7f00000007c0)={'U+', 0x4}, 0x28, 0x2)
writev(r16, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:33 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80000, 0x0)
write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000880))
ioctl(r2, 0x401000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000000)={@initdev, @multicast2, @multicast1}, &(0x7f0000000080)=0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup(r3)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000740)={0x4, 0x800, 0xf9, &(0x7f0000000600)="c09bf14883547c051fed4a90172abc823fc0cc2fd3639b810a9af45c8f28f82632e81139e948a1f061ad3273789bfc299324653b642242d5c3c6b300cb133ed97e5103dc467f2095a752616528e9f02f804a4aa6140754e7efc0ee2200863c74466d8ee50eb7bb81799366a600d70893ad1e5e623a95c6541031fbb23efeb41c7a1c52fc107e105b55d66e0355d5867af1cdf2ec2bb813539df39ba6a66bac91f7c70f637bb2ef359c6a86219b0abdf5270a200c0a15b4bff635dc0d77692430fafe492e5e274552da42e3a318341a980c40cdccfe8433979e7a9bdc999ce86e0e6c43a702c539d75c8dd05c0e5ab2c33e74de8986cb114904"})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lookup_dcookie(0x7, &(0x7f00000007c0)=""/186, 0xba)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000240), 0x4)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x0, 0x0, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0xf9, 0x1, 0x7e, "6408afbcb09fa772127fd071ab109e51", "cfc197a6c131fa75e75c9e2d5da31cd482bce3295fe050a5238ae234daf51125c313667317a2b672f7fbcd9e0e5f748f7274a15b881107766aa643f54a760f467d6140b87de56ceb7078417e8ef171e6a3ca0a2d4ccf1ef1215a84fb2265f042864394180def33fc790aeccf3a40635f6f0a0d8cd2d48f9599068c849a126253e962ac70127d19b4b31ce5d3cd3a268410af05577f4cee681c18e3945d760a4d3d08288d0b7c79c05888d54e44e580cc355e62b80224a7cabd0ccf3b8e29efc0803d4cf77ba1be072d1b7ab22947ea0023517a1bd98a553c272f6557328943059137c127"}, 0xf9, 0x1)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
ioctl$BLKPG(r4, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
getrlimit(0x0, 0x0)
r5 = open(&(0x7f0000000280)='./file0\x00', 0x1, 0x2)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @rand_addr=0x8}, {0x2, 0x4e24, @remote}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000002c0)='bridge_slave_0\x00', 0x3a9, 0x46, 0x3ff})
ftruncate(r5, 0x80080)

05:22:34 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80000, 0x0)
write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000880))
ioctl(r2, 0x401000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000000)={@initdev, @multicast2, @multicast1}, &(0x7f0000000080)=0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup(r3)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000740)={0x4, 0x800, 0xf9, &(0x7f0000000600)="c09bf14883547c051fed4a90172abc823fc0cc2fd3639b810a9af45c8f28f82632e81139e948a1f061ad3273789bfc299324653b642242d5c3c6b300cb133ed97e5103dc467f2095a752616528e9f02f804a4aa6140754e7efc0ee2200863c74466d8ee50eb7bb81799366a600d70893ad1e5e623a95c6541031fbb23efeb41c7a1c52fc107e105b55d66e0355d5867af1cdf2ec2bb813539df39ba6a66bac91f7c70f637bb2ef359c6a86219b0abdf5270a200c0a15b4bff635dc0d77692430fafe492e5e274552da42e3a318341a980c40cdccfe8433979e7a9bdc999ce86e0e6c43a702c539d75c8dd05c0e5ab2c33e74de8986cb114904"})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lookup_dcookie(0x7, &(0x7f00000007c0)=""/186, 0xba)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000240), 0x4)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x0, 0x0, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0xf9, 0x1, 0x7e, "6408afbcb09fa772127fd071ab109e51", "cfc197a6c131fa75e75c9e2d5da31cd482bce3295fe050a5238ae234daf51125c313667317a2b672f7fbcd9e0e5f748f7274a15b881107766aa643f54a760f467d6140b87de56ceb7078417e8ef171e6a3ca0a2d4ccf1ef1215a84fb2265f042864394180def33fc790aeccf3a40635f6f0a0d8cd2d48f9599068c849a126253e962ac70127d19b4b31ce5d3cd3a268410af05577f4cee681c18e3945d760a4d3d08288d0b7c79c05888d54e44e580cc355e62b80224a7cabd0ccf3b8e29efc0803d4cf77ba1be072d1b7ab22947ea0023517a1bd98a553c272f6557328943059137c127"}, 0xf9, 0x1)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
ioctl$BLKPG(r4, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
getrlimit(0x0, 0x0)
r5 = open(&(0x7f0000000280)='./file0\x00', 0x1, 0x2)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @rand_addr=0x8}, {0x2, 0x4e24, @remote}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000002c0)='bridge_slave_0\x00', 0x3a9, 0x46, 0x3ff})
ftruncate(r5, 0x80080)

05:22:34 executing program 4:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x20000280000, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0)
getuid()
r1 = socket$inet6(0xa, 0x4, 0x8000000)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f0000007e00), 0x3ffffeb, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14)
clone(0x1000001100202, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x3, 0x4)
unshare(0x0)
munlockall()
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x0)

[ 1146.492477] binder: BINDER_SET_CONTEXT_MGR already set
[ 1146.498293] binder: 14080:14118 ioctl 40046207 0 returned -16
[ 1146.505231] binder: 14080:14118 BC_INCREFS_DONE u0000000000000000 no match
[ 1146.512903] binder: 14080:14117 unknown command 1986356271
[ 1146.516409] binder: 14080:14119 BC_ACQUIRE_DONE u0000000000000000 node 1569 cookie mismatch 0000000000000000 != aa830ea37a000000
[ 1146.518933] binder: 14080:14117 ioctl c0306201 200001c0 returned -22
[ 1146.532221] binder: release 14051:14076 transaction 1565 out, still active
[ 1146.550220] binder: release 14080:14117 transaction 1568 out, still active
05:22:36 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:36 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='TIPCv2\x00')
pipe2(&(0x7f0000000040), 0x800)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:36 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x20000000}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009)
getegid()
r0 = perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x0, 0x0, 0x0, 0xde4d, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x10001, 0x7ec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x4b95, 0x5e, 0x2, 0x0, 0xfffffffffffff000, 0x6, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x3f}, 0x0, 0x0, 0x8001, 0x2, 0x1, 0x0, 0xd8}, 0x0, 0xf, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x5}}, 0xe8)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2000, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x9, 0x9, 0x6000000, 0xb81}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc)

05:22:36 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:36 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x2)
getsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x3e)
perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001700)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f0000010000000800000000000000030000000000000008000000000000000100008000000000000000000000000000000000000000000000000000000000040000005d060000ff01000000000000000000000100000001010000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006920418f9ad5a391fc1c769cbf7f009fbfabb89756ae9eff5e6a2c7d92bfd3e41dfd3f1831dbb0f0b369131ac03d0ded57a196b559a366cb47d6974d5dc490b4408d526d19fd4fc8d2b0fbd36b6796f431d5178d565c65bac2716e99e9eec902f8ea2c699ad91c6789644b56d0415bd723561ca23b2678d2a5c1e970689233ef933f8c14af5a510acf692c6c48397206489b6c8573a583cb61688eceed888a92bc8b78609fac60a3b50984107b3ab7291cf55d"])
clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000250, &(0x7f0000000100)=@framed={{0x18, 0x3}, [], {0x95, 0x0, 0x0, 0x2}}, &(0x7f0000000180)='syz\x10%V\xc5\xd7r\x00', 0xe2, 0x1000, &(0x7f0000000700)=""/4096}, 0x48)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0663044001f40e35"], 0x0, 0x0, &(0x7f0000000680)})
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)

05:22:36 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c002500", @ANYRES16=r6, @ANYBLOB="000425bd7000ffdbdf25080000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000780)={r0, r3, r2}, 0xc)
tkill(0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xb2c2d5f24833ed2}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xcc, r8, 0x30d, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @broadcast}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:36 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x4c, 0x3, 0x8}, 0x4}}, 0x18)
write(r0, &(0x7f0000000180)="240000005a001f00ff03f4f9002304000a04f51107000100020100020800028001000000", 0x24)

[ 1148.688212] binder: BINDER_SET_CONTEXT_MGR already set
[ 1148.694329] binder: 14125:14133 ioctl 40046207 0 returned -16
05:22:36 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd07}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(r0, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @broadcast}]}, 0x28}}, 0x0)
fcntl$setpipe(r0, 0x407, 0x3)

05:22:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x977, 0x9, 0x72, 0x8, 0x0, 0x7fff, 0x0, 0x3, 0x4, 0x1ff, 0x40, 0x9c, 0x101, 0x81, 0xffffffffffffffc0, 0x4, 0x6, 0x1, 0x1, 0x4, 0x7, 0xcb, 0x6a5, 0x4, 0xffffffff, 0x8, 0x7, 0x7fffffff, 0x4, 0x6, 0x7b, 0xfff, 0x0, 0x2, 0x1f, 0x7, 0x0, 0x1, 0x6, @perf_config_ext={0x5, 0xb47a}, 0x100, 0x1, 0x3, 0xf, 0x0, 0x5, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000040), 0x2}}], 0xd3, 0x1ffffffe)
sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x0, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000100)={0xc, 0x14, "cad5adbe047fb0730a5abdeec0d964f8bf7ac7e3"}, 0x1a)

[ 1148.757421] binder: 14125:14152 BC_INCREFS_DONE node 1572 has no pending increfs request
[ 1148.774793] binder: 14125:14152 Release 1 refcount change on invalid ref 890172417 ret -22
05:22:36 executing program 4:
r0 = socket(0x2, 0x803, 0x3f)
setsockopt$inet_opts(r0, 0x0, 0xffffffd, 0x0, 0xfffffffffffffea2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x141046, 0x0)
ftruncate(r1, 0x10004)
gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5a)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x118)
wait4(0x0, 0x0, 0x1, &(0x7f0000000280))
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@initdev, 0x4e23, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r2, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0x8004)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000440)=""/198)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x2901, 0x2)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e)
sendfile(0xffffffffffffffff, r1, 0x0, 0x72439a6b)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x4}, 0x28, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)

05:22:36 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x0, 0x7fffffff, 0x0, 0x20, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_ident={0x2, 0xb, 0x81, 0x0, 0x7}, @sadb_x_sec_ctx={0x8, 0x18, 0x1f, 0x0, 0x34, "7cac59272a9c103eec6172c0d288c3eb5d114187011ccff1fb86c36b9b67a7d2c57ca9db692cb8af31d0a50f3e635901b236ca36"}, @sadb_sa={0x2, 0x1, 0x4d5, 0x3, 0x0, 0x91, 0x0, 0x80000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_sa={0x2, 0x1, 0x4d4, 0x8, 0xa0c, 0x76, 0x4, 0x80000001}, @sadb_ident={0x2, 0xa, 0x1f, 0x0, 0x100000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_lifetime={0x4, 0x0, 0x40, 0x9, 0x5}, @sadb_key={0x6, 0x9, 0x138, 0x0, "7470da59b7ebe138a8a492c229c44129220886d159ed3bd025b96f46262a4e1afa0b9202f3d32e"}, @sadb_ident={0x2, 0xb, 0xbb, 0x0, 0x100}]}, 0x100}}, 0x4)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:36 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r1}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TIOCCBRK(r3, 0x5428)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="002425d67000ffdb9eff2b3400000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000600)='TRUE', 0x4, 0x3)
r6 = socket$netlink(0x10, 0x3, 0x10)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1149.470764] binder: BINDER_SET_CONTEXT_MGR already set
[ 1149.476253] binder: 14125:14197 ioctl 40046207 0 returned -16
[ 1149.482853] binder: 14125:14195 BC_INCREFS_DONE u0000000000000000 no match
[ 1149.490964] binder: 14125:14152 Release 1 refcount change on invalid ref 890172417 ret -22
[ 1149.499797] binder: release 14125:14152 transaction 1574 out, still active
[ 1149.507659] binder: release 14125:14133 transaction 1571 out, still active
[ 1149.516888] binder: unexpected work type, 4, not freed
[ 1149.522506] binder: undelivered TRANSACTION_COMPLETE
05:22:39 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r0=>0x0}, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r1}, 0x10)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setfsgid(r0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4ecc24305c61c12a}, 0xfffffffffffffd46, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
tkill(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:39 executing program 0:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(0xffffffffffffffff, 0x1)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

05:22:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
fallocate(r0, 0x0, 0x0, 0x0)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x48, &(0x7f0000000100)="7d6ef37946fd0392d0b7fb7d056ac4c46c89ffe490c3742817172a5fd5ef9e5f6e2ef2ef39891b5e31b40985bbcf48a1379917d84e08385443a78d911a1ff1c5a9f8c8f96b38641c"})

05:22:39 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f6fb35cc4c5366ab"], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
creat(&(0x7f0000000480)='./file0/file0\x00', 0x8c)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000000004002563d20cdce9950080fe229ff6170c4e02f7f5859ef073d2e6f1e06f5828a80090c28519275d54a095a3a5c387e35d85480286b7c03dc2d5645d20bbd1299ff6b75a76043a4beca277e7115a"], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:39 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
r1 = syz_open_procfs(r0, &(0x7f0000000700)='projid_map\x00')
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000980)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x4}, {0x2, 0x80000004e26, @multicast1}, 0x4000000000, 0x0, 0x0, 0x0, 0x6a05, &(0x7f0000000a00)='bridge_slave_1\x00', 0x3, 0x7, 0x5673e0c})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
perf_event_open(&(0x7f0000000880)={0x6, 0x70, 0x33, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8000, 0xa, 0x7, 0xfffffffffffffffd, 0x3, 0x100, 0x7, 0x5, 0x8, 0x1, 0xd7bd, 0x6, 0x7, 0x10000, 0x8, 0x7fff0000000, 0x2, 0x1, 0x0, 0x4, 0x0, 0x8, 0x80000000, 0x6, 0x40dc, 0x3, 0x2, 0x20, 0x3, 0x80, 0x0, 0xffff, 0x1, @perf_config_ext={0x100, 0x81}, 0x20000, 0x6, 0x0, 0x7, 0x9, 0x1, 0x1}, r2, 0x8, r1, 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r3, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r4, @ANYBLOB="2c736d61636b66737472616e736d7574653d2e2c7365636c6162656c2c736d61636b66736604006f723d7472757374656423216c6f626465762c00"])
capset(&(0x7f0000000900)={0x19980330, r0}, &(0x7f0000000940)={0x1, 0x40, 0x3, 0x7f, 0x0, 0x6f0})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000500)='/dev/keychord\x00', 0x2, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x302, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a40)={0x78, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000010)
r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYRES16=r8, @ANYRES16=r9, @ANYBLOB="b980cac7b1e879426e7eeadd1a1223af82a77b72a195226be23a07cc2abd534771350989ff0900a9f7b466b00c1cc56c57b8da9a73219aac71741124a9babaf459c4532dbd5cae0700000038df"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x10)
writev(r10, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:39 executing program 0:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(0xffffffffffffffff, 0x1)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

05:22:39 executing program 2:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000140)=0xc)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0)
accept4$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000600)=0x1c, 0x80000)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r0}}, {@obj_role={'obj_role', 0x3d, 'selfGPLcpuset}vboxnet1user-'}}, {@measure='measure'}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted#!lobdev'}}]})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd2d0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffff93be}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd82b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000001}, 0x84)

05:22:39 executing program 2:
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000600)='#\x00', <r2=>0xffffffffffffffff}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r0, r1, 0x0, 0x8, &(0x7f0000000540)='keyring\x00', r2}, 0x30)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r3=>0x0}, &(0x7f0000000440)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x10008, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=00000000000000000000002,mode=00000000000000000000010,fowner<', @ANYRESDEC=r3, @ANYBLOB=',obj_role=selfGPLcpuset}vboxnet1user-,measure,uid>', @ANYRESDEC=r4, @ANYBLOB=',smackfstransmute=.,seclaboor=trusteh#!lobdev,\x00'])
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40280, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:39 executing program 0:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(0xffffffffffffffff, 0x1)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

05:22:39 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1151.804479] binder: BINDER_SET_CONTEXT_MGR already set
[ 1151.812967] binder: 14203:14226 ioctl 40046207 0 returned -16
[ 1151.837547] binder: 14203:14226 unknown command -868877322
[ 1151.845089] binder: 14203:14226 ioctl c0306201 200001c0 returned -22
[ 1151.856041] binder: 14203:14226 BC_ACQUIRE_DONE u0000000000000000 node 1578 cookie mismatch 2500040000000000 != 0000000000000000
05:22:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}})
creat(&(0x7f0000000000)='./file0\x00', 0x80)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x0, 0x3}})

05:22:39 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x128)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:39 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1152.514709] binder: BINDER_SET_CONTEXT_MGR already set
[ 1152.516216] binder: 14233:14260 BC_INCREFS_DONE u0000000000000000 no match
[ 1152.520336] binder: 14233:14258 ioctl 40046207 0 returned -16
[ 1152.528317] binder: 14233:14259 unknown command -868877322
[ 1152.538897] binder: 14233:14259 ioctl c0306201 200001c0 returned -22
[ 1152.539941] binder: release 14233:14259 transaction 1580 out, still active
[ 1152.552884] binder: release 14203:14226 transaction 1577 out, still active
05:22:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:42 executing program 2:
pipe(0x0)
io_setup(0x3, &(0x7f0000000240))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c)
getsockopt$inet_tcp_int(r0, 0x6, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000140)='})%$wlan0\x00', 0xa, 0x1)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, <r3=>0x0})
fcntl$setown(r0, 0x8, r3)
unshare(0x0)
syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00')
tee(r1, r0, 0xfff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x40000000000000, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x80, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2)
fsync(r0)
r5 = dup(r4)
write$P9_RWSTAT(r2, 0x0, 0x24c)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x4c81, 0xfffffffffffffffe)
gettid()
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r3)
getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000300), &(0x7f00000003c0)=0x4)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340))
getpgrp(r3)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='sessionid\x00')

05:22:42 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:42 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x1, "1e5608ade050bc4c"})
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
fallocate(r0, 0x0, 0x0, 0x0)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x0, 0x48, &(0x7f0000000100)="7d6ef37946fd0392d0b7fb7d056ac4c46c89ffe490c3742817172a5fd5ef9e5f6e2ef2ef39891b5e31b40985bbcf48a1379917d84e08385443a78d911a1ff1c5a9f8c8f96b38641c"})

05:22:42 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000480)={'veth1_to_bond\x00', 0x7})
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:42 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:42 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000108}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x16c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x120, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x105b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1154.813786] binder: BINDER_SET_CONTEXT_MGR already set
[ 1154.819788] binder: 14264:14283 ioctl 40046207 0 returned -16
[ 1154.827461] binder: 14264:14283 Release 1 refcount change on invalid ref 1 ret -22
05:22:42 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x10080, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x50, &(0x7f0000000140)}, 0x10)
openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000000)={0x2, 0xfffffffffffffffb, 0x40, 0xfffffffffffffffe, 0x1, 0x20})
rt_sigtimedwait(&(0x7f0000a70000), 0x0, 0x0, 0x8)
sendfile(r1, r2, 0x0, 0x1)

05:22:43 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x28)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x10000, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004000)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc)
tkill(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x1a)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x23}], 0x1)

05:22:43 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x10f, 0x800)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)

[ 1155.545938] binder: BINDER_SET_CONTEXT_MGR already set
[ 1155.547918] binder: 14289:14329 BC_INCREFS_DONE u0000000000000000 no match
[ 1155.551321] binder: 14289:14327 ioctl 40046207 0 returned -16
[ 1155.564391] binder: 14289:14327 Release 1 refcount change on invalid ref 1 ret -22
[ 1155.566444] binder: release 14264:14283 transaction 1583 out, still active
[ 1155.579414] binder: release 14289:14328 transaction 1586 out, still active
05:22:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:45 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
clock_gettime(0x0, &(0x7f0000004c80)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000004a00)=[{{&(0x7f0000000140)=@ax25={{0x3, @default}, [@default, @netrom, @null, @rose, @bcast, @bcast, @default, @bcast]}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/12, 0xc}], 0x3, &(0x7f0000000280)=""/117, 0x75}, 0xffffffffffffffb3}, {{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000600)=""/222, 0xde}], 0x2, &(0x7f0000000700)=""/200, 0xc8}}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}, 0x1000}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000018c0)=""/83, 0x53}, {&(0x7f0000001940)=""/182, 0xb6}], 0x2, &(0x7f0000001a40)=""/179, 0xb3}, 0x1ff}, {{&(0x7f0000001b00)=@tipc=@id, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/174, 0xae}], 0x1, &(0x7f0000001c80)=""/190, 0xbe}}, {{&(0x7f0000001d40)=@nfc, 0x80, &(0x7f0000003100)=[{&(0x7f0000001dc0)=""/146, 0x92}, {&(0x7f0000001e80)=""/215, 0xd7}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/202, 0xca}, {&(0x7f0000003080)=""/66, 0x42}], 0x5, &(0x7f0000003180)=""/93, 0x5d}, 0x5b}, {{&(0x7f0000003200)=@ipx, 0x80, &(0x7f0000004340)=[{&(0x7f0000003280)=""/30, 0x1e}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/58, 0x3a}, {&(0x7f0000004300)=""/37, 0x25}], 0x4, &(0x7f0000004380)=""/78, 0x4e}, 0x1f}, {{&(0x7f0000004400)=@caif=@dbg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/60, 0x3c}, {&(0x7f00000044c0)=""/9, 0x9}], 0x2, &(0x7f0000004540)=""/214, 0xd6}, 0x8}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004640)=""/146, 0x92}], 0x1}, 0x81}, {{&(0x7f0000004740)=@un=@abs, 0x80, &(0x7f0000004980)=[{&(0x7f00000047c0)=""/233, 0xe9}, {&(0x7f00000048c0)=""/153, 0x99}], 0x2, &(0x7f00000049c0)=""/16, 0x10}, 0x8f5}], 0xa, 0x100, &(0x7f0000004cc0)={r1, r2+10000000})
tkill(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:45 executing program 2:
pipe(0x0)
io_setup(0x3, &(0x7f0000000240))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c)
getsockopt$inet_tcp_int(r0, 0x6, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000140)='})%$wlan0\x00', 0xa, 0x1)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, <r3=>0x0})
fcntl$setown(r0, 0x8, r3)
unshare(0x0)
syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00')
tee(r1, r0, 0xfff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x40000000000000, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x80, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2)
fsync(r0)
r5 = dup(r4)
write$P9_RWSTAT(r2, 0x0, 0x24c)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x4c81, 0xfffffffffffffffe)
gettid()
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r3)
getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000300), &(0x7f00000003c0)=0x4)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340))
getpgrp(r3)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='sessionid\x00')

05:22:45 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:45 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:45 executing program 4:
syz_extract_tcp_res$synack(&(0x7f0000000040)={<r0=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000000080)={<r1=>0x41424344}, 0x3, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x100)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000000c0)=0x8)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/validatetrans\x00', 0x1, 0x0)
syz_emit_ethernet(0xfffffffffffffd3a, &(0x7f00000002c0)={@link_local, @empty=[0x0, 0x0, 0x14], [{[], {0x8100, 0xffffffff, 0x40, 0x1}}], {@mpls_uc={0x8847, {[{0x5, 0x9c04, 0x2b, 0x401}, {0xfffffffffffffe6a, 0x7fffffff, 0x8}, {0x2, 0x6, 0x1f, 0x63}], @ipv4={{0x27, 0x4, 0x6d7, 0x0, 0x1be, 0x68, 0xffffffffffffff00, 0xffffffff, 0x2e, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x1, {[@generic={0x88, 0x3, ','}, @lsrr={0x83, 0xb, 0xfffffffffffffffc, [@rand_addr=0x36b5, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x7, [@multicast2, @multicast2]}, @cipso={0x86, 0x1b, 0x36, [{0x5, 0x5, '\\*V'}, {0x5, 0x4, '`h'}, {0x0, 0xc, "6a5363ee1742730e576c"}]}, @ra={0x94, 0x6, 0x1000}, @rr={0x7, 0x23, 0xfffffffffffffff8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @multicast2, @multicast1, @rand_addr=0x5c2, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}]}, @ssrr={0x89, 0x27, 0x7, [@broadcast, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @end]}}, @tcp={{0x4e22, 0x4e21, r0, r1, 0x9, 0x0, 0x1f, 0x0, 0xfff, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "f0630fb5f537421c6bb05d7e6d46c5a0"}, @fastopen={0x22, 0xc, "88ca41cdb7a2f850dd03"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x12, "4429c8d599fe1445c0ad63888b40891c"}, @sack={0x5, 0xe, [0xb755, 0x7100000000, 0x4]}, @exp_smc={0xfe, 0x6}, @generic={0x13, 0xe, "782e1851ae4d1c9e8e6aaa07"}, @mptcp=@add_addr={0x1e, 0xc, 0x20, 0xc, 0x5, @multicast1, 0x100000000, '^S'}]}}, {"06d5012a0a31405a16943950001ab4ee5076c577b8ecef3112d61d36bc6e4bd5a220cfa6dd989cac3557a80d580e6ec68427ad0a40ab5c4a27af394a89220493304b7a79cabea714e1e08d7853a30d68c7a177fd533b0966c24aac2a17ebe87bf5929fb8b57da5290028f99f300e22e2243d4a7dfdf9004c33cbe742304febae6f3f64cc0bb3b3fc212099dea695884ac831b689701ad8a0bbcd4d5e9c98ffdb79f2107684cd"}}}}}}}, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
ptrace$getregs(0xe, r3, 0x7fffffff, &(0x7f0000000140)=""/128)

05:22:45 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x90402, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6})
read(r1, &(0x7f00000000c0)=""/19, 0x8)

05:22:45 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000280)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x2)
r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='cpuacct.usage_user\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000100)={&(0x7f0000000040)=""/46, 0x2e, <r3=>0xffffffffffffffff}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=""/188, 0xbc, r3}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffb)

05:22:45 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x180, 0x8, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {0xf, 0x0, 0x1}, [@typed={0x14, 0x13, @ipv6=@remote}, @generic="31e74ac49276e4b19ed7f181b42bd0be552c887deee2c78beffafb3ea1697302546429ef803ef1e8e2770a82912fdd52166679687517e00da82966c6fb1625657116759c862957c522025fcc4517465f2a8bbfe6a5d486139f56cf93668d6ffb8581bf41c18a8f1d4fa5465f7c62651f", @nested={0x5c, 0x10, [@generic="b898cb98b9e281a16c735d63f878304a6215cd2ae05832198b00660e7ff4cce12c952bea67bb7008c4e27dec91508e77f90c55d868ce6f3b5561b6febef834051ca2c88d7e39cdbd4c183efef29a2836934dfe378742c9", @generic]}, @generic="aa1106a6e2ff8dae3ea898c2f0795b2db111add4ed401112779e80bca7058272aa902cd487f97aebf51625d3f0df7018a2353e4cf2abf5de9532eed3c291d506bf63cf7f80b7ed60a9b549ef102d85b69a608c7030035b1a0d937c62f99c5516add80d524b4c541e0a9fd916dc553c14f9a51fed3f0af44f5d", @typed={0x10, 0xb630, @binary="05deaa6d049c2490f64e153e"}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

[ 1157.828660] binder: BINDER_SET_CONTEXT_MGR already set
[ 1157.835540] binder: 14337:14354 ioctl 40046207 0 returned -16
[ 1157.842516] binder: 14337:14354 got transaction with invalid offset (34359738368, min 0 max 24) or object.
[ 1157.852823] binder: 14337:14354 transaction failed 29201/-22, size 24-8 line 3197
[ 1157.861346] binder: 14337:14354 Release 1 refcount change on invalid ref 1 ret -22
[ 1157.871995] binder: 14337:14354 BC_ACQUIRE_DONE u0000000000000000 no match
05:22:45 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffdd4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040))
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x20}], 0x1)
socket(0xb, 0xb, 0x3)

05:22:45 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0xfffffffffffff801, 0x1}, {0xbbf6, 0x5}], r0}, 0x18, 0x3)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x80000, 0x0)
timerfd_settime(r1, 0x1, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x12)
sync_file_range(r2, 0x0, 0x6bf2, 0x1)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:45 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x349, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000007)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
flistxattr(r0, &(0x7f0000000280)=""/4096, 0x1000)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000240)={'caif0\x00', {0x2, 0x4e22, @multicast1}})
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x84000, 0x0)
write$P9_RRENAME(r2, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40800, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, 0x1db)

[ 1158.562929] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.568379] binder: 14360:14391 ioctl 40046207 0 returned -16
[ 1158.568432] binder: 14360:14393 got transaction with invalid offset (34359738368, min 0 max 24) or object.
[ 1158.585072] binder: 14360:14393 transaction failed 29201/-22, size 24-8 line 3197
[ 1158.593192] binder: 14360:14391 Release 1 refcount change on invalid ref 1 ret -22
[ 1158.593884] binder: 14360:14393 BC_ACQUIRE_DONE u0000000000000000 no match
05:22:48 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:48 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0)
accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c, 0x80800)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x4, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vga_arbiter\x00', 0x800, 0x0)
ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000a80)=""/31)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000680)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000580)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000003c0)=0x7, 0x4)
recvfrom(r0, &(0x7f0000000480)=""/239, 0xef, 0x0, 0x0, 0xf7)
syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00')
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x14}, @rand_addr="0a89863ab18146df34f6767cdd0c9173", @mcast2, 0x7, 0xc6fd, 0xcc, 0x400, 0x7e600, 0x20, r3})
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
r6 = dup(r4)
ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0)
sendmmsg(r5, &(0x7f0000007e00), 0x400000000000087, 0x0)
close(r0)
writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a0f360a6c904ffdea10f357341c7675e67d3508f272929e43b3560852a2b2f8541d4ab53e480ecadb588a549d3b1c6fe99a41c5d6f5189399daf9bd982b3b12ba1ec24dc3ff3f2009051653f086f166215fd87bfefb08b8765c136111a651f6eeb2c1c20bdf107364f7524e175bdcd259412eb8a69c665396f96e028f91c4a8fc249389d67148697a6ec7302c30753fdf1da88fcf63af0dd298b4890b146565e744fc4bb28ad355c58690dc9bcbbddb2e90ab48c9900b5de645938fb0184ae6356b4e1732f9a35cf96112e9c28f58e428221fded51d5f4af2d528b73f0f6f34b4ff037ab1167fa7857", 0xe9}], 0x1)

05:22:48 executing program 2:
r0 = socket(0xa, 0x8000000001, 0x0)
getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', <r2=>r1})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @dev}, 0x0, r2})

05:22:48 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:48 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:48 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000480)={r2, 0x0, 0x699, 0x800000000000000, 0x2})

05:22:48 executing program 2:
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uhid\x00', 0x0, 0x0)
r0 = epoll_create1(0x0)
vmsplice(r0, 0x0, 0x0, 0x9)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
ioctl$RTC_UIE_OFF(r1, 0x7004)
timerfd_gettime(0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x6, 0xfffffffffffff800, 0x7, 0x228e, 0x2, 0x4, 0x1888000000, 0x1}, &(0x7f0000000080)={0xffffffff, 0x0, 0x1, 0xfffffffffffff800, 0x0, 0x7, 0x207, 0x10001}, &(0x7f0000000100)={0x5db, 0x5, 0x7, 0x8, 0x7ea, 0xff, 0x3ff, 0xcee}, &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={0x8000}, 0x8})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

05:22:48 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x46144d9d11eebec5)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000))

[ 1160.842513] binder: BINDER_SET_CONTEXT_MGR already set
[ 1160.848810] binder: 14403:14419 ioctl 40046207 0 returned -16
[ 1160.858683] binder: 14403:14419 Release 1 refcount change on invalid ref 1 ret -22
05:22:48 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/23)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {0x6, 0x14000, 0x5, 0x5}, 0x4c, [0x9, 0x0, 0x0, 0x0, 0x1b6b3cb5, 0x80, 0x0, 0x9, 0xfffffffffffff801, 0x101, 0x7, 0x1, 0x9, 0x7600, 0xd73b, 0x2, 0x4, 0x4f7, 0x52a2, 0x8, 0xfffffffffffffffa, 0x6, 0xff, 0x5, 0x7, 0x200, 0x101, 0x9, 0x2, 0x7, 0x80000001, 0x80, 0x1, 0x6, 0x1ff, 0x1000, 0x9, 0x93, 0x0, 0x2, 0xfffffffffffffffb, 0x3, 0x1, 0x100000001, 0xe2bc, 0x3, 0xfffffffffffffff8, 0x6, 0x2, 0x4, 0xffffffffffffffe0, 0x9, 0x80000001, 0x7ff, 0x4, 0x7, 0x3ff, 0x51, 0xffffffff, 0x2, 0x7, 0x4, 0x8], [0x94, 0x69c2, 0x80000000, 0x800, 0x5, 0x401, 0x2, 0x7ff, 0x8000, 0xfffffffffffffffd, 0x7, 0x4, 0x3, 0x8, 0xba53, 0x7, 0x4, 0xffffffff, 0x1, 0x80000000, 0x800, 0x1f, 0xd269, 0x2, 0x8001, 0x8df, 0x800, 0x800, 0x1, 0xcea, 0x2, 0x5, 0x5, 0x3, 0x593b, 0x29835e79, 0x2, 0x9, 0x101, 0x1, 0x2, 0x4, 0x81, 0xfffffffffffffffb, 0x6, 0x7fff, 0x1, 0x7f, 0x3, 0x4d, 0x3, 0x9, 0x285c, 0x4, 0x9, 0x0, 0x7, 0xd3a7, 0x8, 0x109e8db8, 0x9, 0x493bb43e, 0xfffffffffffffeff, 0x4], [0x4, 0x7, 0x7, 0x5, 0x79c, 0x5, 0x6, 0xa1c3, 0x0, 0x3, 0x22ea, 0x9f, 0x9, 0x4, 0x2, 0x3, 0x4, 0x7ff, 0x6, 0x7, 0x3, 0x7fffffff, 0x7, 0x8, 0x5f3c9f1a, 0x80000000, 0x800, 0x1000, 0xc66000, 0x4d7d, 0xfffffffffffff9c4, 0x4, 0x3, 0xffffffffffff8000, 0x3, 0x10000, 0x5, 0x2, 0x3, 0x7, 0x5, 0x40, 0xe10, 0x3, 0xb1, 0x6ad, 0x8, 0x7fffffff, 0x10000, 0xf895, 0x3, 0x5, 0x0, 0x7ff80000000, 0x5, 0xffffffff, 0x1, 0x100000001, 0x6, 0x20, 0x1f, 0xfffffffffffffffb, 0xc8, 0x54], [0xfffffffffffeffff, 0xcb, 0x7, 0x7c, 0xffffffffffffff8f, 0x3f, 0xff, 0x81, 0x1f, 0x5102, 0x103b, 0x800, 0x6, 0xd25, 0x0, 0xfff, 0x5, 0x1, 0x2, 0x964, 0x7f, 0xffffffff, 0x3ff, 0x80000001, 0x4, 0x7fffffff, 0x9, 0x3d81, 0x8000, 0x9b5, 0x1aa2, 0x6, 0x7, 0x89, 0x4, 0x9, 0xfffffffffffff30c, 0xfffffffffffffff9, 0x8, 0xfffffffffffffff9, 0x1, 0x4, 0x7, 0x8000, 0x5, 0x9, 0x5, 0x0, 0x20, 0x7f, 0x39, 0x28, 0x6, 0x5000000000000000, 0xfff, 0x81, 0x8001, 0x4, 0x81, 0x9c92, 0x5f, 0x0, 0x1, 0x7fffffff]}, 0x45c)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:48 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))

05:22:49 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xa200, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000), 0x4)
syz_execute_func(&(0x7f0000000040)="f242adc4220597e767410f53d8f3f24052f30f2dbbc2ea0000420f2bbb00000000410fa4bcc94758a0ce00c481796ef264f20f38f11e66430f3a17e60f")

05:22:49 executing program 4:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10940, 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x7fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x34)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9f})
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000))
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

05:22:49 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009)
getegid()
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x0, 0x0, 0x0, 0xde4d, 0x0, 0x0, 0x1, 0x7, 0x0, 0x7, 0x0, 0x6512dd2a, 0xfffffffffffffffd, 0x3, 0x10001, 0x7ec5, 0x0, 0x9, 0xffffffffffff9a6a, 0x0, 0x0, 0x4, 0x0, 0x4b95, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffff00, 0x6, 0xc1, 0xffffffffffffffeb, 0x4, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x3f}, 0x20, 0xffffffffffff8c04, 0x8001, 0x2, 0x1, 0x0, 0xd8}, 0x0, 0xf, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000001580))
sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000400))
sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x3, 0xb, 0x104, 0x70bd2a, 0x25dfdbfb, {0xc, 0x0, 0x6}, [@generic, @typed={0x8, 0x31, @u32=0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020af0030700000025bd700000000000050019000000000002004e21ffdf0900000000000000000002004e217f0000010000000000000000"], 0x38}}, 0x0)

05:22:49 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000000)=""/111, 0x6f, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c000)
tkill(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1)

05:22:49 executing program 5:
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, [], [{}, {0x0, 0x0, 0x0, 0x0, 0x80000001}]})
sync_file_range(r0, 0x0, 0x800001, 0x4)
fcntl$addseals(r0, 0x409, 0x2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
io_setup(0x3, &(0x7f0000000300)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x76, r0, &(0x7f0000000340)="ca601a8513d9", 0x6, 0xfffffffffffff215, 0x0, 0x2, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000003c0)="b52b6ef21128ca949d9af23fb1e26dd2de", 0x11, 0x851b, 0x0, 0x0, r0}])
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f00000002c0)=0xc)
fchownat(r0, &(0x7f0000000000)='./file1\x00', r1, r3, 0x100)

[ 1161.593608] binder: BINDER_SET_CONTEXT_MGR already set
[ 1161.599140] binder: 14403:14424 ioctl 40046207 0 returned -16
[ 1161.599398] binder: 14403:14466 Release 1 refcount change on invalid ref 1 ret -22
[ 1161.615634] binder: release 14403:14419 transaction 1591 out, still active
[ 1161.622917] binder: release 14424:14466 transaction 1594 out, still active
05:22:51 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x20, 0x0, "c4dfb4dfc34130e80b4fe05d04ea00ab6149708b030f122ba53dc4226c8d70991444efd56d57410ec41d1d9ddc77b04dc8f3c20435197b9c3e6987af19f370810f41f2ef9c36f7b06ded73d096d3fc4a"}, 0xd8)
connect$inet6(r1, &(0x7f0000000140), 0x1c)

05:22:51 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x35, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000e6130000005d000000000000009500000000000000b09eaf43cf72c76afa4ad1ad95e575ab23fcdfa6a8367209cde8460102e55d2a3b8caa28d8541103f78b6916ab09c04f8441e4064fd77261c1f3985d08c29d4e4daf51b46b7f19450701bba69357cf9f96e64d52db05ebdcc2f4cd41e4e47fe84105a9d1fe8486f7add9156b9fa16ec90d6572bb11c89e2c00040000f27103772ff33e1a090420ddf864f83a820da9b986fc27e61326d2805a76a473ffe4a3470825970305041bae3a76cf66b4e33b7f3738b81a3474b55a48fd29ed130266e3d68e4f8ab916c41f80ddf629581b7a900782f59715d80745fee64c4831e0cb5773efa46ab27168a680a8d974ebb9542cc77f4289a6fca6dfeb0fd8ae66c66d974e7dd7c75234538b8fd7c0141c10c58847535a298d80cf00df6c4ca5e8089c187539da7e8389142652c38cb643875b60952c56b98926a9007165099e8acbc2590c8dc3501855fa4abdd392536374d3d6aa6453ef2c4232aaf00ad4384f43253f8156ebe44a4afde7ec39f4fc7b8a029aeeab7f348496d0873f7a85dd97fed4fb9e6200c9d20be5d47c8b5663ff164d86109faf4e"], &(0x7f0000000100)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xfffffffffffffffc, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1221}, 0x4b5)

05:22:51 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:51 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x8, 0x209e1e, 0x3, 0x10}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000300)='bridge0\x00'})
syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="086310405b70996dcb6d98a906f80edeaf423c17b9d8e68b00000000000000000000000000000000d7450787fd1da86677e95b5605aad86b8cf908adeadb753f2c9af1beaaca6f987c1780852d05d283c003a04a9725f79fc851534117519577569a3f613e7428c01452ede17828e6f6bb50d2ef3d0324c3e9f327d60e15898ec84ad74e832524c97abf81be65521f13ad125e390bb4", @ANYRES64=0x0, @ANYBLOB="0000000089634fbc9c65961ba4724c000000510000fddd103eee7c458d15bcb8add6c684599cf17378eb04a7bcd7ab09852814844c9599afa191f0675a0682f4ebe8893bc752d0302c5123d9039a87df414db73cab69ab07d946d02be6ef9448da6578c11e2563c55b76099bf7f93fde718447acbd4606e53579370bca168014d3bef34e92d218022af60f74edf3d156e6ca63fd66126d"], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="a488e69f50e0293a"], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
getrusage(0xffffffffffffffff, &(0x7f0000000200))
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:51 executing program 2:
r0 = inotify_init()
inotify_rm_watch(r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x9, 0xc0000000000000})
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x0)

05:22:51 executing program 2:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = fcntl$getown(0xffffffffffffff9c, 0x9)
ptrace(0x4207, r0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000023000002800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb0000000000000000030005000000000002000000008000000012b478407f86046c7f44bc4cd7fcd6224034c8cd9b48da8fa0480a21cf876593b6751dacd48e5f0c814764dc8c446222781ddc4e0d"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000003, 0x0)
ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000280)={&(0x7f0000000240)=""/41, 0x29})

05:22:51 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x0, 0x80000000, 0x1, 0x81})
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f0000000f80)=[{{&(0x7f0000000680)=@l2={0x1f, 0x1, {0x6, 0x0, 0x5, 0x3, 0x3ff, 0xffffffff}, 0x200, 0x4f}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="6d0dfc1d1b561bb4b43a6118eb37018afff7d91f95f0fcdf0d9d08e293aa269a7e403c192a6484be1ae0bbb15fecf0ae7a3d0da8bcc4c37546999df31942841983204c52c3885cbd8b9b3fc73b59cb7b59379ba659d982302e38eb40f3ceb1c41a5cd06b13e7be5472ae4f778debff2c8f9a671c31fb6d90a84460fa60a07e738513365f56ae9d1793d0c62e3f122725f577cd89f1973c11af9613eef2de795835bded5d078778ad7621ff250635", 0xae}, {&(0x7f0000000480)="1b80f098ab0b169c170ad9d29ad4bca00509ae8480380daedbaebcd47cdeaf92b4b69595955c25a2e1dc5ab6", 0x2c}, {&(0x7f00000007c0)="5d7f0965d59b9cd52d47c6e432e5d17f257e092be49526fb91266190b49b4ea3ad27b04c", 0x24}, {&(0x7f0000000800)="08d503985cddf91f59babded59210556c615feabed1cfb492c", 0x19}, {&(0x7f0000000840)="fb8c236196f3518ddd4febec355e9b5dd9f5a115d2860ea3bfe678688dece4c4bdc2af344485878c8c904f3a348671931de99685a6b2f7081b98ac46239020a2651d34facdca122bf8a4f195cd102a4578fde380fcc6a9df440c047681800752566f568cbc9f4634782380010585c4547ff563bf057e33a5b77d0ca90975a5246fe9eaafe034399297575bd8794fb279f809795036cfa2983229dc0e7c17c256d2b2ca73ecdd93f8c45d14e5bc23abd7740dccef3dffe14db20d6995", 0xbc}], 0x5}, 0x9}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000980)="e753b89d215a7b5a54f9123af553f68a852c003615bedc08af2e0017c0360ae0bff009a774e4a318f49acdc9504e75e406ef8c8f8f11beb94c95aec3076d960a1f5d45db249e92eac363c2b0a15b26c450ef93faa1a0c6723f27815ba001d2d04945f81208600737dfc03b3fc1582802a1437b01fea842828eae73044b39e1140ff4529a37461b6a4037561a14076b", 0x8f}, {&(0x7f0000000a40)="a2cb8c140d4c436fdd82a29add815b3f31fcb2f1be8eb00f1a33ccd2563c394ebba7998425d217170751204aa0bdfbe11148870340114c7d496b1ade181f7a85650920f2d5201e8de0c8cdc2e51f1a251e29089e177ede87ce1f5b1b313e8d5864db876bd05a0b2e22aae3830dc50f8dc4358e8bc84a368b6c839262dbff7ed93132f5571768b85b808ae86b74f6b08b62e3d742d95df847d90b2d5c4e14ba918add6314eaadc6791a06d6fe2923a0da6c6a3f22c5754fe12b0ae9a94f7265", 0xbf}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f0000000b00)="845ae431c589da9c52cc20ce6bcda3a98bda99a13598a56d5f9328286505b1125463112bedbc01e02b8b816eb03c65d4dde95e7f118dfbb12f421f4c3cf9763a3145f8ed20d6e4a6655ddbd9447f29b7c8b1e2b6feeeacebd15a32ef19be24b65529ce56420bd8743ca0cc484dec3b899c6966af911be0cba4bc40141d75f3089aa46833c76d0df1db5f221f7a070ffd18fc5991f6b793849a12c3b195428f982e0ee88e0814cee7ccb48f74367243a0c2e0c799e217c6e94c90ed168cd77f464e8fc0bdcf00b656b437961b2dfd744096bb8a941cfc9962134cae28a3e46b6ceaa20564510e84d8ec3b", 0xea}, {&(0x7f0000000c00)="6e389166d35ceaddb47cb8f26ad92022d6b57a1e81e18d9016fe75e4d523085e7fa080064de353954606be6ccf258a78be238aab2fd1f8982703794644a60e3181eff12c71c92d042a6cb12cf40ed74589f7a768d55225a678a7f49e71855cf6ee36a3255c72a5f115a8813845c6b9396a53aaac08dce62cb4769baedc92df73c781d0e0d3170cd89f997f1d45d25fa40ca0199b6ffcfcf116e4a6bfb5b6a5886d747f5f4a00d6ca6c7eb8b8223b629cdeec847eebd40c0d4404a1959aa815615202e8b1bd4999d484564e08cc54", 0xce}, {&(0x7f0000000d00)="af6d7c9f634ba739b7ad7fa839a742eae908e7120cc20d3f15dbe3844fdc87eaf80aae5461176f9b11b0885d92eac19eb085bcc7b7580b90b2362a4a6556daf97d2fe3e2ec71d57383dcca74bb20c1f944d76dfa78112c1e1a4ebef9f7e670e9b0c04d4a9721e18fa15a0304315b0fe4a9164c53accc18", 0x77}, {&(0x7f0000000d80)="ef71c7108e064fbf8430420fbf1954c55b908d746cc62915ed364673877017c532f7f957428ed8bbfe0a8d382eccb1fa4d59143187dd13de8445aa127fd121d62fd604f7e524d9d633f2ff04c8d97fc50b9eb3829b0ae17d03f9ee", 0x5b}, {&(0x7f0000000e00)="c814e8de02f39ffea8a6c4573721acae13e31593fc7fe1c696b43661a1d3faba30d5fcc78ac2d3850858127f138ca5acf992efd414a1f940014bd6e34ef46787055b6ac0bc561d36f283ad4f46d32f1b30f03a06a3cae497e8110607e657cf031facc24c0f272d5037df94a456bf6dda787eebb9bf9cc81e9a4010aa7cce889b5ccf6cb78a48f8413f93672eb84711e275ce86551424e4e42a467bd7dfb31d7bf1b5a6b22cd43f7b5194b951b8fddb9c206096be02957fc797b693e01a20c33bd2473034b0b04b21414796cec4d68a86e6fb9b560057d6e30ede09e15e237e348b1ec973e38df0ab68bf0d553e", 0xed}], 0x8}, 0x3ff}], 0x2, 0x24008804)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/checkreqprot\x00', 0x40, 0x0)
unshare(0x20008000000)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x1f)
preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f00000001c0)=""/201, 0xc9}, {&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x7, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6, @in6=@mcast1}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8)
preadv(r4, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x94}], 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000480), 0x1000000000000268, 0x0)

05:22:51 executing program 5:
mkdir(&(0x7f0000000280)='./file0\x00', 0x3)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/36, 0x24)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x202000, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x4c, [], 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)=""/76}, &(0x7f0000000240)=0x78)

05:22:51 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000140)='fdinfo/3\x00')
flock(r0, 0x0)
ioctl$EVIOCGPHYS(r2, 0x80404507, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r2, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/85, 0x55, <r3=>0xffffffffffffffff}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r3, 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x350, 0x188, 0x188, 0x188, 0x0, 0x188, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x118, 0x188, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xc, 0xfffffffffffffffb, 0x1, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0x3, 0x0, 0x0, 0x0, "4f2f2b7913399dee73f0010d5c70a9c38e8dd34aabfc14dd8efdf67a997f51ef9447189cbcec5472a98ff9af420edff0f5a4d4a5f5923c704187a35b29a0023f"}}}, {{@ipv6={@mcast1, @loopback, [0xff0000ff, 0x0, 0x0, 0xffffffff], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip_vti0\x00', 'bond_slave_1\x00', {}, {}, 0x5c, 0xfffffffffffffffd, 0x1, 0x6}, 0x0, 0xc8, 0xf8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x200, 0xff, 0x80}, {0x4, 0x360a, 0x101}, 0x2, 0xfffffffffffffffd}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
preadv(r2, &(0x7f0000000480), 0x100000000000021c, 0x0)
close(r0)

05:22:51 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x80000000, 0x81, 0x3, 0xe730, 0x0, 0x0, 0x40000, 0x9, 0x760c24fa, 0xff, 0x7ce, 0x5, 0x81, 0x8, 0x74, 0x0, 0x401, 0x6, 0x401, 0x68, 0x6, 0x8, 0x5, 0x80000001, 0x4, 0x7fff, 0x5, 0x9, 0x1, 0x9, 0x2b, 0xa7, 0x5, 0x6, 0x800, 0x2927, 0x0, 0x2, 0x3, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0xcf5, 0x4, 0x0, 0xe9f, 0xffffffffffffff81, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xb)
ioctl(r0, 0x42f, &(0x7f0000000200)="5eecd0f475d191f72523582694dafa78936c74f0dd74dac78656ffca2eac55873f1d7a1b3a541ad4cc8f2cb214672efe0fc8d5cdc0dd1891c3c5302ca6c7fe434368fb2257a350e61de96ede3e43ff")
r1 = memfd_create(&(0x7f00000000c0), 0x0)
write(r1, &(0x7f00000001c0)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r2, 0x10e, 0x7, 0x0, &(0x7f0000000040))
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000280)=""/204)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x408000, 0x20)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080))

05:22:51 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5)
read(r1, &(0x7f0000000300)=""/250, 0xfffffffffffffd95)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x1ff, 0xfffffffffffffeff})

[ 1163.901657] binder: BINDER_SET_CONTEXT_MGR already set
[ 1163.908798] binder: 14472:14498 ioctl 40046207 0 returned -16
[ 1163.917010] binder: 14472:14498 ioctl 8940 20000340 returned -22
[ 1163.934616] binder: 14472:14498 BC_INCREFS_DONE ua9986dcb6d99705b no match
[ 1163.946145] binder: 14472:14498 unknown command -1612281692
[ 1163.953919] binder: 14472:14498 ioctl c0306201 200001c0 returned -22
[ 1163.964697] binder: 14472:14498 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1164.621616] binder: BINDER_SET_CONTEXT_MGR already set
[ 1164.627937] binder: 14472:14507 ioctl 40046207 0 returned -16
[ 1164.634644] binder: 14472:14507 ioctl 8940 20000340 returned -22
[ 1164.635111] binder: 14507:14512 BC_INCREFS_DONE ua9986dcb6d99705b no match
[ 1164.648782] binder: 14472:14507 unknown command -1612281692
[ 1164.655306] binder: 14472:14507 ioctl c0306201 200001c0 returned -22
05:22:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x801000008912, &(0x7f0000000080)="0adc3f3188b070000000000000000014000000da4de183369307e00c468609135a037c5b4406912399644b5b94b26a")
r1 = socket$inet(0x2, 0x803, 0x1)
getsockopt(r1, 0xffffffffffffffff, 0x32, &(0x7f0000001180)=""/166, &(0x7f0000000000)=0xa6)

05:22:54 executing program 2:
r0 = dup(0xffffffffffffff9c)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xc9)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)=""/62, &(0x7f0000000100)=0x3e)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = socket$inet6(0xa, 0x0, 0xb22)
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x6, 0x4)

05:22:54 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:54 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
write$P9_RATTACH(r6, &(0x7f0000000480)={0x14, 0x69, 0x2, {0x12, 0x3, 0x5}}, 0x14)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08631040", @ANYRES64=0x0, @ANYBLOB='\x00I \x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
time(&(0x7f00000004c0))
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:54 executing program 5:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2001, 0x0)
bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000200), 0xffffffffffffff46, 0x0, 0x0, 0xfffffffffffffd33)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r3, 0x0, r0, 0x0, 0x80000000, 0x0)

05:22:54 executing program 4:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x46c00)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x2, 0x9, 0x1}, 0xa)
prctl$PR_SET_TSC(0x1a, 0x2)

05:22:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mknod$loop(&(0x7f0000000080)='\x00', 0xc020, 0x1)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0))
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

05:22:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c)
syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'team_slave_1\x00', 0x3}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000002600)="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")
sendmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0)

[ 1166.927755] binder: BINDER_SET_CONTEXT_MGR already set
[ 1166.933488] binder: 14522:14549 ioctl 40046207 0 returned -16
[ 1166.943609] binder: 14522:14549 BC_INCREFS_DONE u0000000000000000 node 1598 cookie mismatch 0000000000204900 != 0000000000000000
[ 1166.957097] binder: 14522:14549 Release 1 refcount change on invalid ref 1 ret -22
05:22:55 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x2, 0x4, 0x3390, 0x7}, 0x2c)
fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f0000000040)='teql0\x00', 0x6, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000026c0)={'teql0\x00', 0x800})

05:22:55 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r1=>0x0, @local, @multicast2}, &(0x7f0000000040)=0xc)
connect(r0, &(0x7f0000000100)=@hci={0x1f, r1, 0x1}, 0x80)

05:22:55 executing program 2:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
pipe2(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x7)
ustat(0x101, &(0x7f00000000c0))
fremovexattr(r3, &(0x7f00000003c0)=@random={'security.', '{posix_acl_accessem1.(\x00'})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=<r4=>0x0)
ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/131)
waitid(0x1, r4, &(0x7f0000000140), 0x20000000, &(0x7f00000001c0))
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x991`\x00'}, &(0x7f0000000080)=0x54)
ioctl$KDSKBLED(r2, 0x4b65, 0x3a)

05:22:55 executing program 2:
r0 = socket(0x200000000000011, 0x802, 0x4000000dd86)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001440)='/selinux/mls\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0xfffffffffffffffe, 0xe0)
ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000140)="3fbd8248c256fd1dc6b4152b44ce9400ef0d1a301fce9104de7a04dc33d86b653571162b5f76c481f15961056528b7f0a33e0d618aa1563eef675fa768dc79d781b5754434d40fa769fa7ac3d07df8b3528f842f53004d5f6cd2d39527330738805103b971d1119a83828a52e2a262f25f0bfc96d096980ec6b8b56508ea0d4120f230430dcf862d7e2dbb9619e6a6f5baf807da3ff038ab65565563b89442baf5463492c917897bf7a755dbaf7b9dc8f59a16f4f3a2c15d2322dc642e9b319d5f965d07c6080687d908ea0e331a0c2298d04b51edfd1dfdbb421c5082caf55c95cda49f820458c9bf716ff71d7b88d143356fbdb6508452167cbdf6ee3d")
connect(r3, &(0x7f0000000240)=@l2={0x1f, 0x3, {0x100000001, 0x7, 0x200, 0xffffffff, 0x10000, 0x3f}, 0x7, 0xfffffffffffffbff}, 0x80)
write$binfmt_elf32(r3, &(0x7f0000001400)=ANY=[@ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRESOCT=0x0, @ANYRES16, @ANYPTR, @ANYRESOCT=r2, @ANYRES32=r1, @ANYPTR64, @ANYBLOB="7bfd9b8f1ffe8b2cbbf629a154b98e7afd82c40b1a8b5c82cdb053360c078d130eb123ccea627617a36c2ced4a614dfb78786c3eea5be1a6d630e3aca17e9647a15807b7d83b409d73e4cf23599fe970bf2cdfce6a0d16c4e3412372a6e0e9fa2b17a741f7903b35446605ffaef2dfcf85ea287df5b4c87adf3e3bd266e7a5649884d5edc60b36cce93a7cd109f21a98a9f028a3d2f1fb638de59088a1b56f4e9cec935456344cd6b3778dfe0833430f8ff5824d4276e72d0165daeaee89f8109414bd85ce461503494952910cbd75086d763de594f2bc83e826f073095a822aaf6015eb7f447c1ba963e6f106cbbb5f18aafb13c33c486fae2f0c9369b64328de596562c2432781d15ddea062fbe07662dd0749eae4a2c7658308dbbe5c7eb4d2d84e0eaca6c45eec5aeb731b6d0d7a08fa92d6fa751d34c60cedce71453c7fc76d43c2d6fb2c8f65380ee6ddd3e349bcd4918aa3153fd678ff1df32c46b3bea4f2c794bc1e54c7a3973ab04882160274c6e647651d481832329c699fd722c8d843ca883dbe447eefb76727ea2d0c30a8afe5d11fcd0a896cf5275ad0bbe9655eaf43bd502ecc9178c779d4bfd4ccb5574bbda117fbe0102dd5ee340b6f5fd79969da5c01507a3e8e887271e6f71663d976c4ce428368c741807f421f5769a226b25be102b3013b88c71b1ba5e7c71ef158d4f01985e182250d78130665eabb7222bd2c28ac8e92e4dbfc596e0d617a2e65b4390885cd452792768b37485a461ae3fb41499749bb6b19be00d2da249cdb46d8090c26ed248bfe5b63e2273fcb03e014aab9a409459f9e207680bf8fca5f42d93eac53912f2587c6af29420e5e465763b1882f41facca2a172adbac1b14168fde12018a02178f7cd47b8d59524b49892d0a9db35ec855e20e6caedd29b414582b5e31f641aaed26309a68075ae89af66bd0d606a7e6e3b1981f9ba2ba8923d7dadca67f2afd39c391fb5a8cff8ccfe8cb5325230247732d59c26ea3ee4c1c1e6d010caca597dc95ad9588b5cafe7af638ada79505201bd51893439f012934e562ed2fe178e21194fbdd11536630b84ac2a25665b95fab30c814649757ab1f46fffa30fda8ff7bfc5eae3661ef68eebea837f1d89178e7a238349ac50c7bd57c98f34061a31e15c8cc75a5404d4fcf031584e8841968772f0612e9e875875fef4d8e70113b775ab32892cc4e76d24c5a59b82d3d5638d032828ab09b8713c4ea04d962bf7a77dd47d5fce2b6f94898f77aa88e4778c7b636be9b4c54f9e1e466e8c46c60ffbf8722d922c076c9908850758b00faec953bdb941dc89ca31821b3a0ad24c36e37d8b2f45c8ad79d09a59d239cb1e2f95470e4d81a1cbaa44bfb245f2d37b6b6257139b757349b316278c49248e5548ba11e5f1450665bc055ecc808357e503bc47291722451e9e4fc2d60ba65c9e908f559aed0f919dca8dafc826c4250576886be9e717f0a5210ee38c51714f1e4e68176a30ace2facaf76c52ba2d06e8e5ca970ebd42dab34f777a1838cb423541a3f9fd7732af2173f52cd1e14bdd300b67a40086f6c7195af97b332b1d847593f7937105a1978e3e15d2d8fead215018fdf5038f5f710550d2543790e9e5dfe662c03bd55039f3c84bda629983d07508028bd6c74d10f491537f33f128304f0caf9918e9ad52bcd2ccdbe1c3b3ac413fd451196de284ebe71189e6cdc239144603851efedc008a5eba39983af2516c40a78c1556055737f05fdc5183efcd0867f0c178fa666346e5f55baa412d43f370f78d75ee97c57c1346b5c58a8ee3c26371f761ab11dc70c6318d3f83d60d4e4e642c8eb9a3b76196968c3c7e5816562aeebb41850e022f8ae3d0ca5c623b1a78cc32724389373ea9b1a7d0dd94a6573ae787e997f27ccbc5e2c5d0460bca5ac462bc49ba4847e5857e7ad9fc06b139c6061ab081cc403c930beeea32cf2c5f058bb7595be908b585cc01bd5b7ecbaa67a7781887d90cc2cd0d2a1dc7c4ef0011c8bf4d0330a43dc7c43c0cbbe80c120b8f757b38f6ec984d0751740cd8294307815acca21671392af691807d468782a5ccd87a4218ec3d5c245f293363ee30bbc4d7037ecc086f1ee84ab042c2d6c8f8bb0af7fe0bcba7d60fa54adecab6dd036063ee0b276dd0dfed7a6302f23df2bdc3b446b6cb2090ad9562efcf5dda1aa5e1fd26a674be5541618a5f794ff53de4967379105b6f62a55549d12e51d481b9820157b7f958b545b2701aefeab784d589b123b74aeef443087e2853357aa91382119f0bdc101b1a88b9d177a2aa5be91afcaa584ce612733447a19d220c28c232ef02c77272624b77973f5b82ed7bc71df6e7053de3d2adf21fbbea6266b074feb5355b618c5b39472563e90af931a30ac53780b2511733f4951d5898191879b08ffc71ff0f4692c83a7d91904dbd3b9af3606d3aa5af4ffdcf902e9e969f809ad068d9b41e3c0fb05cef131943d5937c00ad53b7bfd0bbf94be3341338dfcb8392d2450fff5cfa554297730f1ac38c9d794c9c5de33f9cbbcf3e16af337cc70edd22293bb608a1367b30b20971211d2bfffb03a6fe1c107afac451cbbb35e471abc97f67935fc181a7cdc1fc5a3b727afbfcbd1a3f3daba15cb24733dd277b62fe9fba7dc6013bf9ce09b637f7dd1a0be3bcb1e74dd64ca7c83da885f1f8bf16a9b64d0fad7da8ff71c6fab37836167d737510c9a1fc451c42f3a1979d6647f98f3a703d7c8c8454c2fc5090b9a197fce84d27d82d523dff176b6eb364be936053807fc898d796aecd922309d2df1f946011c8b23ca35181b36d4cbef05349f2f44e4975ef2a7c50ba2b0ef949fd47f8b35741e576eb4a3acd23b40319549d53c903ddf8f58794f70506cc4025446e41ffcac831a74d634cca4e6f9c532244e7691c630d970d362e3c4c859d32d849a088203b1578122c0160af94a03a2ce5f52e7ec70b161c055a2a3d872894b4f1ef69aad44a0e696e67cc869777d95d9cd56906232bea1f2b26045fa484269aeb30a8b56bdb0d74979de89d6690519cbe18328a306f3d8f38d607418c9dc2d58e328fb912bd7253d3f2d19f18ce3531b918d42b6f697fe7aeb53632de591b72eff91d47845f32c095027c1532ca3acd24a99cf32a37f447daf6d08e0e180e4ed8900aaccc66da0c0cdd4f6ab42f3294110e9628833b14881be8c00ef03a39b7703fdaf98c2d479c1c9c0ca48d75aabefcfd2d0fb9cd40af326f9eb72eae34bd5f638a4ab62f10297b2a155e9fe5599ff4fe3d70cad8783a159ec95bdfbd5a8ebd3848d65608bde60a05be6aeb1b3db273190862d4595288c389f173c9d775cda8e5a2823687dbd115503d5e50bf07603884c1aeb9d4a709bfb1fe3f95b23a66fa15220563076a87dafa641b0ed801eea9c853d1f021e4afab13cd9aa7d7b16fc7be1335302e8c4d09339b580d48d3a6463afc0e20a61c34d57abf939c7209a7acb4149245aea62b890b687d65bc8096d5ee99d8c44b616db9630b324d29a854d907664ddb780e40efa2347913ff11ce64814758bc7ae4830c7da4491e2c6648128584a7f225385aa45ddc62a68da181b100794b3708b9ccf1de985c35471642bbe44a55e8e61f7eae4adb0d6b926cc81db3e30a134f06a6d749bc386871c57834540f0623067bc9bbc80b1619d010a381b186914c45323a37c530cd64351984ab277049484a459cc291aca576e22c132072e97f7b2b0e70c91b570a9f760376a2374f8ae061210b558a006edce8d47f4e63318513fb15a1b61747e9b841b04a8e32e88ee7683411b00bc3613be1049764f63cdb41474b91a734702281a1fdc495afe4d0592f108b9ba100570a76cfa57d15ba38bd30ced2518e6a0c028c576bc77da404b4d2c0f90aa10172c39ec6676c0b9296bd19074717f6e4c016d6d5a001f43a59162ecdb775de1dbc17545e1f60e7b0f311710de710da8fbabcc100907ace48feab69c94fce6df4ca266f153beb58d8758cdc2df9757fd9e92579e04458285fb070ed5b128427b471689a06d786ca7c9342388f97b27bd7fb51538781e35cab13be94e24ed6436abe430ef31681d836291689fa770c6048da54ab9f8c76aabd9faf8b558a9ade79f6f0f815f775e0a81962599b37a91ee5e02b377791b7963a888dd0e220a675823305f6f424639695bce73af1f79aa27f8c39b0afad7c077973621c1961e2e593c1e289023548575e9ea50138cf3d9ae1960a45dccabb9f1b1e3f28b8a9ccb6a979e4037a00341a4f942698816b0cd83ca84a740e8d258041c3c54966117ab24ff109ea7c1cdbfd025bff3262a2323571b92e21fc0ad47479f6a2b89c96f27858f5763d58d57f13a70c4a0cd682b2daa041f4cfc4ef4351a5b3ed9b1c1d9ca9f8ede9374845c69f811b2b557168902971d29ecfe2185d0a726eb97a9233f48ede7d89f2d539825ca8e21c7860d32d6f9f9f065950affbcc2d1f103608a9c2e76db36dc073bd3f59b5d0eeb5322dd35717e168b570494b84e6cc20de225600b535ffb03cdbf9423e2887cdc00a19e5d742e7681e7b9f4bd4dfdd062cd7b3884748f66f66c3cf206587f49f718de27c39ef3337e500a46d98e13fffc60c8e5a3e08be7edec42a2eed242e1a54c96ec014a062ba954e08331ca837fd5baa3277cf3a778a4e0b7384625b830a11da0e46ebd5d09306af12cbbfce5c8b0fbefe44328d7b2ffec779208fac3627708aee255c845b81cda91f5323185bdf0a05e124b34d63e0ba3631fbd5e863ccf4e23413806a0fc3bed8493900f9974af80ce746ade58927fcef43000efe84e0c661a20e84499b3f89835008ca5b534ce5c72f412239c60f1c953c07d342bafb3e2f7d289bd0932d4d05cce59f0a26be4ac8b75587c97f7c6f8df714c8182904af75d5d2d8b0865238bdbe56ee51e61bb00fe15c4f9685f55c35fc7782fef66700a4e314d1229ca10ef23a7add05367ff4fb28c1f630e02c4ddd758416b144989bfdb6ac3f1f33f5f6707cc16875b2fefc746fe34347a559aeb9b29ec9d89071ee5245d5f75c732839fc887afdd6bea02472bdf4d9acb85a953bf86a2a5e735ec4dffb9926c997c00cc882193badec5edf1956a4ced5685ffccedd3aa3b83ef4617612b9615c97d7ee475cb13c98aeac33065de7637173fa3fdab3473c5cf8caad9b3e1db76714aa2307c3b77905a03c7d5d531a667ac0d8975f0263afd7a56023687a09e1642e95d30bd88dad872f55185bcc272188b9cb7593cb6b67ba357b30b259e0c65a674f5f88ea028737d1a396e36a64b155397828723f1bfed16d5f7b843c50fcef9cdf460b30c9a5a20e2c6fa966ca82848f5d15cc329330aef4ecb121ce7fd8d898959c9729fa6be2d223bbf1fe6be13ecf70d0efb3bae9ef437209155a47262ab0c4d44d05867ea7dfbc48a2db8c1dedcbdaec091dee02f1752f2d07eff6e40de49d5a39a9904b6a5d3a6a523939a1e448758536f66f3d69c840284eda6b44318ffdad0402fae3dab5999e94eee1f3d8e6e6e361ccbf0dc0a2bf87424c48bc340479a952a6721698e70888abe071aa329612729d275264b02c10c66b82af9ec1fc8d81b7b3257c0ab6b065048d2d564444e8cc0406ad76105424384c6f4c91314b78a3bfcccc65fe042e8717f806c54f81633ea288f8000b17980439f1efad4c95c3fb787a0976511d5327aac55f8ac3feb9748312040b609d4d5cedd2029b16b1dd62e1b1d19d566d3fb5687656495854082294acf11294e6829890c3d61c", @ANYRES32=r2], @ANYPTR=&(0x7f0000001380)=ANY=[@ANYRES32=r2, @ANYRES16, @ANYRES64=r3], @ANYRESDEC=r3, @ANYRESDEC, @ANYRES16=0x0, @ANYRES16]], 0x5)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x1)

05:22:55 executing program 4:
r0 = socket(0x7, 0x3, 0xfffffffffffffffe)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x408080, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000240)={0x2, 0x10, 0x2, 0x2, "470346819f72cf8831a0248df83ae8bc2b4b0409497b1034a4f68b5bcdc2cf1e"})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@remote, @in6=@empty}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000040)=0xe8)
socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x200000000400806e, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @remote, 0x2000000003}, 0x1c)
sendto$inet6(r3, &(0x7f0000000100)="d6", 0x1, 0x0, 0x0, 0x0)

05:22:55 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:55 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
eventfd2(0x0, 0x0)
epoll_create1(0x80000)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1167.643458] binder: BINDER_SET_CONTEXT_MGR already set
[ 1167.649608] binder: 14522:14557 ioctl 40046207 0 returned -16
[ 1167.656017] binder: 14557:14591 BC_INCREFS_DONE u0000000000000000 no match
[ 1167.663465] binder: 14522:14557 Release 1 refcount change on invalid ref 1 ret -22
[ 1167.671943] binder: 14557:14591 BC_ACQUIRE_DONE node 1601 has no pending acquire request
[ 1167.680944] binder: release 14522:14549 transaction 1597 out, still active
05:22:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:22:57 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
connect(r8, &(0x7f0000000480)=@in={0x2, 0x4e23, @rand_addr=0x8000}, 0x80)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:22:57 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:22:57 executing program 2:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x230140, 0x0)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=<r1=>0x0)
syz_open_procfs(r1, &(0x7f0000000180)='net/mcfilter\x00')
prctl$PR_GET_PDEATHSIG(0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r3, 0x0, 0x0, 0x80000000000)

05:22:57 executing program 5:
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0xfffffffffffffd80, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2004e23, @local}, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="09042dbd7000fddbdf250400000088000100100001007564703a73797a320000000038000400200001000a004e2300000003fe8000000000000000000000000000aaff0700001400020002004e23e000000100000000000000003c0002000800010009000000080002006417000008000400090000000800040000000080080001001a000000080004000208000008000400050000005c0004000c001d0073797a31000000002c0007000800020056000000080001000700000008000400ff030000080002006c00000008000300050000000c00010073797a30000000001400070008000300050000400800040001000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4c001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffffff60)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000140)={0x20, 0x1, 0x2, 0x0, 0x2, 0x5})
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x16)

05:22:57 executing program 4:
getgroups(0x140, &(0x7f0000000040)=[0xee01, 0xffffffffffffffff])
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100))
setgroups(0x0, &(0x7f0000000180))

05:22:57 executing program 4:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x0, 0x0)
epoll_create(0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100))
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/114, &(0x7f00000000c0)=0x72)
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, 0x0)
sendfile(r1, r2, 0x0, 0x10000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000180)='./file1\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
ioctl$BLKROSET(r1, 0x125d, 0x0)

05:22:57 executing program 2:
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000001})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getrlimit(0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffe038})
ptrace(0x8, r1)
ptrace$poke(0x4209, r1, &(0x7f00000000c0), 0x70effd)

05:22:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x14c, &(0x7f0000000000)=[{&(0x7f0000000440)="24000000110007041dfffd946f6105000700000150f40000000002000800a3a20400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

05:22:57 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00')
preadv(r1, &(0x7f00000017c0), 0x1c2, 0x0)

[ 1169.954128] binder: BINDER_SET_CONTEXT_MGR already set
[ 1169.964014] binder: 14604:14624 ioctl 40046207 0 returned -16
[ 1169.983748] binder: 14604:14624 Release 1 refcount change on invalid ref 1 ret -22
[ 1169.998649] PF_BRIDGE: RTM_SETLINK with unknown ifindex
05:22:57 executing program 2:
pipe2(&(0x7f0000000680)={<r0=>0xffffffffffffffff}, 0x80800)
getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000006c0)={@broadcast, @multicast2, @initdev}, &(0x7f0000000700)=0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
getrlimit(0xfffffffffffffff8, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x3, 0x3, 0x7fff, 0x1, 0x100000001})
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000000c0)=0x20, 0x4)

05:22:58 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200fffa08a234ffff1fffffff00000000aaaaaaaaaa00ac1414aa00000000000000"], 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x30, 0x40, {"9e8b8bd101a79b15fa5548bca08f204b3f2e048247"}}, {0x0, "a273306cfabadc350847e313939d17ee92ce022fe0922bba9ae562393053077556450de816bfb024cd6f56535dfcb4cca16aca5483ae023c0262a70f92290a2356430d7182ba9c6e06712d995f5d5c3895030cb281e021d9769bdfc96e2f54aa34de476b1fc85a57cdc3700d8143d2e7d02c649a136d7205636d767161014e"}}, &(0x7f0000000200)=""/26, 0xb1, 0x1a}, 0x20)
sync_file_range(r0, 0x5, 0xffffffffffffff81, 0x2)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)=""/118, 0x76)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)

[ 1170.005907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1170.017897] PF_BRIDGE: RTM_SETLINK with unknown ifindex
[ 1170.024253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1170.689346] binder: BINDER_SET_CONTEXT_MGR already set
[ 1170.694964] binder: 14636:14649 ioctl 40046207 0 returned -16
[ 1170.695296] binder: 14636:14651 Release 1 refcount change on invalid ref 1 ret -22
[ 1170.755895] binder: release 14604:14624 transaction 1603 out, still active
[ 1170.764958] binder: release 14636:14651 transaction 1606 out, still active
05:23:00 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182)
r1 = memfd_create(&(0x7f0000000180)='*\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000080))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
pread64(r0, &(0x7f0000000600)=""/186, 0xba, 0x0)
sendfile(r0, r0, 0x0, 0x2000005)

05:23:00 executing program 4:
mkdir(0x0, 0x0)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8003f1)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x9)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0xffffffff})
mkdir(0x0, 0x0)

05:23:00 executing program 5:
capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300))
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000000)={&(0x7f0000013fe4)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x3, {0xa, 0x4e21, 0x200, @mcast2, 0x57e}}}, 0xd, 0x0, 0x15f, &(0x7f0000000080), 0x58}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0)
write$P9_RFLUSH(r1, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7)

05:23:00 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:00 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:00 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
accept(r1, 0x0, &(0x7f0000000480))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:00 executing program 5:
syz_open_procfs(0x0, &(0x7f00000002c0)='net/anycast6\x00')
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000d80)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003000000220300000000000040000000000000002c00000000000000010000000000380002000000000002000300000000000000090000000000000003000000000000000500000000000000ff030000000000000200000000000000fffffffffffffff4070000000000000000000000008400000800859b917a3bc6dd323b94b8e6040a000000000000b9ffffffffffffff00000000000000000000004e041f0400a50c00000000000051afd927c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14c660ecc2ae97ff2521eff25128cfcf29f2783094a0869adb0073a8c154ff"], 0x125)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
prlimit64(0x0, 0x3, 0x0, &(0x7f0000000240))
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0)
unshare(0x40000000)
openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240))

05:23:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0xe29f)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240))
timer_create(0x3, &(0x7f0000000180)={0x0, 0x18, 0x3, @thr={&(0x7f0000000100)="0cf8c393cfd5d8c78ac22f4934c8520dc01d0f3e8ec0e02023b4219f1a49ff665f04678e", &(0x7f0000000280)="fa4e1bde6923062a7d07fd2225ee1c5be456e82dee6e4286f5c16255dcea57ab846fcf1b52c2ad60934a2b7b48089c8a6a0614c0123186d81f251f15579312009748afa7aa7d76b8549aad0d15de391ab81ff51319d7baa793524bbcbe3355589e2ab2a6204771fb18800726fe0f8e6c831cef54935ffd2da293cb4564891b829fae38da45b3662a0524"}}, &(0x7f0000000200)=<r4=>0x0)
timer_gettime(r4, &(0x7f0000000340))
ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

05:23:00 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040))
lseek(r0, 0x0, 0x40001)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x40400, 0x0)
recvfrom$unix(r0, &(0x7f0000000080)=""/49, 0x31, 0x20, 0x0, 0x0)

[ 1172.998303] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.004695] binder: 14662:14678 ioctl 40046207 0 returned -16
[ 1173.013472] binder: 14662:14678 Release 1 refcount change on invalid ref 1 ret -22
05:23:01 executing program 2:
pipe(&(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000a40)="ff", 0x1)
tee(r2, r1, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5)
read(r3, &(0x7f0000000200)=""/250, 0x33a44bcd5c7ffb1f)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000140)=""/166, 0xd21})
ioctl$KDDELIO(r2, 0x4b35, 0x7)

05:23:01 executing program 5:
r0 = add_key(&(0x7f0000000240)='\x81s\xb9z\x00>R\x86Q\x1d\x1bS~\x1c\xd2c\t4\x99F\x1d%\xf90\xb1B\xb3i\xae\x00\x9b\xc1\xd5\xbd\x88W\x16Y\xba\"G\x8b\x86\x00\xa5sj\xc4\x11\x84PO@\xc6\xc3u\xb4^\xd7\x84\x95E?q\xfb\xb2k .\xcb\xd2\x7f\x7fn\xdf\xc6\xa15\b\xac\x0e\xf4\x1b\xc1\x18q\x16\xca\xd7\x01\xbd\xdah\x8d0\x16\x17A\xe2\xd6\xc2\xfa,\x8c\xfc#\xd31\xc5\xdd\xd4\xa8\xa2\xfe\xd0\x9c\xe9\xae\xa5\xae\x8b\xb8!\x7f\x8e\xba[k\x00\xa1i\xd7p.\xd5\xd6\xa9\xc8\x15k\xfa\xa9=\x01\xe9\x9ci\xfe\a\xf5HG\x8b\xa5\xc0Sj\xc6\xf3q\xa9\xe8\xd4E', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$clear(0x7, r0)
socketpair(0x17, 0xa, 0x2a80, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0)
request_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='syz', 0xfffffffffffffffc)
openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x80000, 0x0)
fcntl$setsig(r2, 0xa, 0x1e)

05:23:01 executing program 5:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='nk\xf9\x00\x00\x00\x00\x00\x00route\x00')
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)

05:23:01 executing program 5:
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220})
mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0xd)
mknodat(r0, &(0x7f0000000000)='./control\x00', 0xe020, 0x9)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

05:23:01 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:01 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340), 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:01 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340), 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1173.725700] binder: BINDER_SET_CONTEXT_MGR already set
[ 1173.736092] binder: 14662:14710 ioctl 40046207 0 returned -16
[ 1173.747353] binder: 14679:14710 BC_INCREFS_DONE node 1613 has no pending increfs request
[ 1173.761891] binder: 14662:14710 Release 1 refcount change on invalid ref 1 ret -22
[ 1173.770786] binder: 14679:14715 BC_ACQUIRE_DONE node 1613 has no pending acquire request
05:23:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:03 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x0)
write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x20, 0xe4, 0x1}}, 0x14)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @local}, 0x8, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='ip6gre0\x00', 0x5, 0x3, 0x100})
fchmod(r0, 0x100)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x3, 0xdc, "fa11637e80712828b456a00ce3b77816cad0c310967ea102c6c60e183964875247e0759a5f84a203899fe502cadf37d6f3a4daf5aade2c0c9b9516514b7c7050c7c42d0bc6b26c85ce4f12956a80e3b11a2ac4bf911f4b3c5ba0df30ed77a732c6ee8124be7491a77ed900a1a82e6b9077a64b549799c69de7de89dc1fbc0f9a8bdeb42e2bd087e83f678ed77b233489f7c346efe09c9692af185433c47be0730a5a41579eea37a273cc9e8be1d07f36d20da696508b1fab0263b1ae4026ef69362e18b5a3b55c60a2f9c262e65652a61cbfe5526a72ef1e05ffe239"})
write$P9_RSTATFS(r0, &(0x7f0000000100)={0x43, 0x9, 0x1, {0xfffffffffffff5b1, 0x1, 0x0, 0x0, 0x1000001, 0x6, 0x8, 0x4000000000c, 0x100000001}}, 0x43)

05:23:03 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06630440bb0000"], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:03 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340), 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:03 executing program 4:
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(&(0x7f0000000000)='./file0/file0\x00', 0xf4, 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0/file0\x00', 0x10000000102)

05:23:03 executing program 2:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x414202, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5)
ioctl$RNDGETENTCNT(r0, 0x5207, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x6)
chmod(&(0x7f00000000c0)='./file0\x00', 0x0)
getdents(r1, &(0x7f0000000100)=""/95, 0x5f)

05:23:03 executing program 2:
r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000003c0)=0x1c)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e20, 0xc77, @mcast1}, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, 0x3, [0x101, 0x80000000, 0x80000001, 0x140000000000, 0x0, 0x100, 0x7f, 0x81]}, 0x5c)
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/enforce\x00', 0x8000, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000580))
wait4(0x0, 0x0, 0x80000000, 0x0)
r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
io_setup(0x3f, &(0x7f0000000100)=<r3=>0x0)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000300)={0x33, @local, 0x4e21, 0x4, 'lblcr\x00', 0x25, 0xff, 0x6d}, 0x2c)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xffffffff, 0x7ffffffc})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x7, 0x80005, 0x4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}])
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=<r6=>0x0)
wait4(r6, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='./bus\x00', 0x8)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="51f500000000000000000000000000000800000000000000", @ANYRES32=r5, @ANYBLOB="00000000f9ffffffffffffff00000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000033f33bd5243e7e5f9190636a100c8a386880f3813cfc05eeded6993b9b1ff718839e0326b7a2449868b79d18ce1dc246aba5f18da0270d62fd7e8b7ae4dc8607a491d984ac03eba289c7176a96371ff64da8c2c05b2136aebd30d939d31c07f571f710ad47d8013db2e8469c764b11668adfdb1d3133f24fd37c3b21a3b42f0667cb90ba94661b576ca52c90ed2f7a9e9c81e03efa35bf6bb36fde38af4dccdaa54700282cec65884764192b5e176d7a75734a0358c8653609cdbe240b27df0c6054326c7ea53", @ANYRES32=r2, @ANYBLOB="00000000ae4789590000000000000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000050000000000000000000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000000100000000000000000000000000000000000000000000"])
getegid()

05:23:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4203, r1, 0x0, 0x0)
tkill(r1, 0x1b)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400000, 0xca})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

05:23:03 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$VT_WAITACTIVE(r0, 0x5607)
r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x1000000000000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, 0x0)
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x8000000000044000)
io_setup(0xb, &(0x7f0000000240)=<r4=>0x0)
lstat(0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100))
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000, 0x407000}])
lseek(r3, 0x0, 0x4)
openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x2, 0x0)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000040)={0x0, 0x0, 0x1})

05:23:03 executing program 5:
clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
rt_sigtimedwait(&(0x7f0000a70000), 0x0, 0x0, 0x8)
sendfile(r0, r1, 0x0, 0x1)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x3b, [], 0x0, &(0x7f0000000000), &(0x7f0000000080)=""/59}, &(0x7f0000000180)=0x78)

[ 1176.039039] binder: BINDER_SET_CONTEXT_MGR already set
[ 1176.046099] binder: 14731:14754 ioctl 40046207 0 returned -16
[ 1176.071374] binder: 14731:14754 Release 1 refcount change on invalid ref 187 ret -22
05:23:04 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fallocate(r0, 0x21, 0x0, 0x2)
inotify_init1(0x0)
ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0xfffffffffffffffa})

05:23:04 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
write$selinux_create(r0, &(0x7f0000000080)=@objname={'system_u:object_r:dhcpd_initrc_exec_t:s0', 0x20, 'unconfined', 0x20, 0xffffffffffffffe0, 0x20, './file0\x00'}, 0x51)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x39, 0x0, &(0x7f0000000040))

[ 1176.763896] binder: BINDER_SET_CONTEXT_MGR already set
[ 1176.769898] binder: 14731:14763 ioctl 40046207 0 returned -16
[ 1176.776449] binder: 14731:14780 Release 1 refcount change on invalid ref 187 ret -22
[ 1176.787249] binder: release 14731:14754 transaction 1615 out, still active
[ 1176.797470] binder: release 14763:14780 transaction 1618 out, still active
05:23:06 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:06 executing program 4:
unshare(0x400)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000240)="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"}, 0x10)

05:23:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:06 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c63be00"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(r4)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000480)={0x6, @rand_addr=0x3a, 0x4e24, 0x0, 'sh\x00', 0x6, 0x7, 0x25}, 0x2c)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x8, 0xffb9)
setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:06 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0xff)
sendmmsg(r0, &(0x7f0000007740)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="b46dd601cae1561380c87fd40357f4632f1429118530623a2c370c066e32519bdae5148dca72fb0b", 0x28}], 0x1}}], 0x1, 0x800)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x10000, 0x6}, 0x8)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0)

05:23:06 executing program 2:
r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c, 0x800)
r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x5, 0x9, 0x2, 0x0, 0x0, [{r1, 0x0, 0x4}, {r2, 0x0, 0x7}]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup2(0xffffffffffffffff, r3)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3)
request_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0xfffffffffffffffb)
openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r7=>0x0})
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r7+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x649002f0928b9c08)

05:23:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:06 executing program 4:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x46, 0x0, &(0x7f0000000000)="e460cdfba821707423070700886408a0219386dd0021fa78b4754f00400000330000000000000000000091ba6971c792a15c568623e52ceef98d8f07829d88110552bbac8572", 0x0}, 0x28)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={<r1=>0x0, @broadcast, @empty}, &(0x7f00000000c0)=0xfffffffffffffdb4)
connect$packet(r0, &(0x7f0000000140)={0x11, 0x1b, r1, 0x1, 0xff}, 0x14)

05:23:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000004, 0x9)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x10019)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))
sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000026980000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1)
sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184)

05:23:07 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x7)
r3 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
umount2(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x200000001, 0x70, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='Ked\xc3\xc8#\xcb3\xc7\x80nts\xd6\x04Q\xabo\x90;\xb3f\x9e\xa4J\xde\x00g\x89\xa3\x8b0\xb8~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x26e1, 0x0)
pipe(0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0xff4a)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$dupfd(r3, 0x0, r4)
r7 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x3963, 0x20000000000001)
ioctl$LOOP_GET_STATUS(r7, 0x4c03, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
pause()

05:23:07 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1178.991174] binder: 14788:14794 unknown command 12477196
[ 1178.997017] binder: 14788:14794 ioctl c0306201 20000140 returned -22
[ 1179.016199] binder: BINDER_SET_CONTEXT_MGR already set
[ 1179.028125] binder: 14788:14794 ioctl 40046207 0 returned -16
05:23:07 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1179.099061] binder: 14788:14819 BC_INCREFS_DONE node 1622 has no pending increfs request
[ 1179.120229] binder: 14788:14819 Release 1 refcount change on invalid ref 1 ret -22
[ 1179.143211] binder: 14788:14819 BC_ACQUIRE_DONE node 1622 has no pending acquire request
[ 1179.767971] binder: BINDER_SET_CONTEXT_MGR already set
[ 1179.768022] binder: 14788:14828 unknown command 12477196
[ 1179.774169] binder: 14788:14829 ioctl 40046207 0 returned -16
[ 1179.779172] binder: 14788:14828 ioctl c0306201 20000140 returned -22
[ 1179.787065] binder: 14788:14831 Release 1 refcount change on invalid ref 1 ret -22
[ 1179.802528] binder: release 14788:14832 transaction 1624 out, still active
[ 1179.809661] binder: release 14788:14794 transaction 1621 out, still active
[ 1179.829176] binder: unexpected work type, 4, not freed
[ 1179.834689] binder: undelivered TRANSACTION_COMPLETE
05:23:09 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:09 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000004, 0x9)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x10019)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))
sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000026980000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1)
sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184)

05:23:09 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000007c0)={'security\x00', 0x95, "cf48a57abea7e8d85e061d880747ad192d261f7326ff8b072c6776b491a3bf35e56c5e3fec5a83ebf9c9fe2218cffcaf9cbabdbac4b03e687e4f231d828c80dccec5523ee3cb2e6b6a46c42e05834edba3edc61f417013c82dce44f10258e5c2f4a8140dafa2f35948490f19ac08b2a975ab178e6e11b56401df17098e6e703ce06c821a148103922ef7a109b89285adfb0df139c3"}, &(0x7f0000000480)=0xb9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:09 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c63be00"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = dup(r4)
shutdown(r5, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000480)={0x6, @rand_addr=0x3a, 0x4e24, 0x0, 'sh\x00', 0x6, 0x7, 0x25}, 0x2c)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x8, 0xffb9)
setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:09 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x7)
r3 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
umount2(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x200000001, 0x70, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='Ked\xc3\xc8#\xcb3\xc7\x80nts\xd6\x04Q\xabo\x90;\xb3f\x9e\xa4J\xde\x00g\x89\xa3\x8b0\xb8~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x26e1, 0x0)
pipe(0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0xff4a)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$dupfd(r3, 0x0, r4)
r7 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x3963, 0x20000000000001)
ioctl$LOOP_GET_STATUS(r7, 0x4c03, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
pause()

05:23:09 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:10 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1182.018339] binder: 14840:14845 unknown command 12477196
[ 1182.034763] binder: 14840:14845 ioctl c0306201 20000140 returned -22
[ 1182.048261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1182.061916] binder: 14840:14845 ioctl 40046207 0 returned -16
05:23:10 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioperm(0x80000001, 0xac67, 0xffffffff00000001)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000001c0)=""/240)
sendto$inet(r0, 0x0, 0xffffffffffffff94, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r1 = getpid()
r2 = syz_open_procfs(r1, &(0x7f0000000300)='net/sco\x00')
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f00000002c0)=0x14)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040))
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e23, 0x81, @local, 0x5}, {0xa, 0x4e22, 0xffffffff, @mcast1, 0x1}, 0x200, [0x3, 0x8, 0x1f, 0x6d8fa41c, 0x3, 0x5, 0x0, 0xf48]}, 0xffffffffffffff9c)

05:23:10 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:10 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1182.068846] binder: BINDER_SET_CONTEXT_MGR already set
[ 1182.076091] binder: 14838:14857 ioctl 40046207 0 returned -16
[ 1182.087979] binder: 14838:14857 Release 1 refcount change on invalid ref 1 ret -22
05:23:10 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x3024, 0x0, 0x800})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000200)={0x1, 0x12, {0x57, 0xe0f3, 0x81, {0x7, 0x6}, {0x3, 0x3}, @const={0x0, {0x0, 0x0, 0xbe, 0x7}}}, {0x56, 0x0, 0x5, {0x6, 0x4}, {0x80000001, 0x9}, @ramp={0x0, 0x4, {0x0, 0x5, 0x20, 0x46}}}})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280))

[ 1182.121383] binder: 14840:14865 BC_INCREFS_DONE node 1628 has no pending increfs request
[ 1182.135991] binder: 14840:14865 Release 1 refcount change on invalid ref 1 ret -22
[ 1182.149099] binder: 14840:14865 BC_ACQUIRE_DONE node 1628 has no pending acquire request
[ 1182.790215] binder: release 14840:14845 transaction 1627 out, still active
[ 1182.806722] binder: BINDER_SET_CONTEXT_MGR already set
[ 1182.812292] binder: 14861:14875 ioctl 40046207 0 returned -16
[ 1182.819762] binder: 14861:14875 BC_INCREFS_DONE node 1634 has no pending increfs request
[ 1182.828574] binder: 14861:14875 Release 1 refcount change on invalid ref 1 ret -22
[ 1182.831185] binder: 14861:14877 BC_ACQUIRE_DONE node 1634 has no pending acquire request
[ 1182.845330] binder: release 14838:14857 transaction 1630 out, still active
[ 1182.860652] binder: release 14861:14861 transaction 1633 out, still active
05:23:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:12 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:12 executing program 5:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x524)
syz_open_pts(r1, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"]}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x2)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/116, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0))
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00')
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000480), 0x2000000000000113, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_upper(r5, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x104, 0x1, 0x7f, "496fe2de13bb2309501d87bc20ff528c", "e6d83c5c4fdbabeeda09962c773ce33bc70ed291673aefbe4222429998deff4141303a7d4f388f53783d8afb2cb18cf3d63bcebfb2951c862f137e4fbfa8002ba57508e45c9fce5a9c0e94d5f6623c67b9f7b1190da0cbbde32368811184a46e673a3f980d8864b08d2de1a0b2098218d210f41f8a09bb0f30b6123328cb8f60de02c861bbff14f4ab9259d883a1f67a6a0e1894233ff8a4aebc16c5cf8ac20862606352e40468149234acce582df6ab1d02d455ddf174574dade874446d34493c37af6d0b62450023327224e6664dbe307f1c1e4d1de04d39bbe993c28ef7db61e7a6a610417058687c4b66abf814"}, 0x104, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0xfffffffffffffffe}], 0x1, 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00')
preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000800)=""/212, 0xd4}, {0x0}], 0x5, 0x10400003)

05:23:12 executing program 4:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="96cec3c733a20c1f68ff28697802d15daf099e179fb3c5ecc4f6ec21752f8f1cfffb83e0a939e47eda4cf7626a2ba2be6fb1143e46b8887f46a1123c31943e7c31308da5f0b91d59fd26da981dc69f8263f2c0d50ae104ef35cbe8dbe0a32d04269db29331d838eb83a1dcb7e419d84a41000ba2668f285e3d", 0x79, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x2}, r1)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000340)={'nat\x00', 0x0, 0x3, 0x8e, [], 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)=""/142}, &(0x7f00000003c0)=0x78)
sched_yield()
write$tun(r3, &(0x7f0000000400)={@val={0x0, 0x800}, @void, @eth={@empty, @broadcast, [], {@can={0xc, {{0x1, 0xa75, 0x2, 0xffffffffffff7fff}, 0x4, 0x1, 0x0, 0x0, "9bc7874d1e67224a"}}}}}, 0x22)
ioctl$KDDISABIO(r3, 0x4b37)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f0000000440)="b145f369a1edd7420346d5b8ae31315e3376e07517ca7645c8507bad5c103595521f22b4db65ab29dc00fc023d6d07c0be94733e81c00d02dc95a157d379b866277475ccdd7bb843481b26d87e8532375454b876cffa9d24d7d36ca9a63d9fa9c1d3d1406ba9146a4f7f56a4eac7a0c81db7df8dd0a7263179088a8277a1ce2cd711c38ad919a02f34f05637d9030685d88a840da7549955db63da937c8a120fe8463b5815e8d07ac853b82d3f6bf2788bccaadca73d7b5791c466eff107159b61128aa3f59bd5ba5c4bb207242608d23feaa8a780a5a62b3cf70da0037ef96ffcacd1ee3c9764c70b4d8010", &(0x7f0000000540)=""/209}, 0x18)
ioctl$sock_netdev_private(r3, 0x89fe, &(0x7f0000000680)="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")
ioctl$int_in(r3, 0x5452, &(0x7f0000000780)=0x6)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r4, 0xd24, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004084)
recvfrom(r2, &(0x7f0000000900)=""/107, 0x6b, 0x40000122, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e24, 0x2, @empty, 0x100}}}, 0x80)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000a00))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40))
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000a80)={0x0, 0x0, 0x4, 0x1})
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000ac0)={0x0, 0x0, {0x3c, 0x1f, 0xc, 0x12, 0x5, 0x5, 0x2, 0x5, 0xffffffffffffffff}})
prctl$PR_SET_UNALIGN(0x6, 0x2)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40)='fou\x00')
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000044)
clock_gettime(0x0, &(0x7f0000000c40)={<r6=>0x0, <r7=>0x0})
clock_settime(0x7, &(0x7f0000000c80)={r6, r7+10000000})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000cc0)={'icmp6\x00'}, &(0x7f0000000d00)=0x1e)
pselect6(0x40, &(0x7f0000000d40)={0x9, 0x3, 0x7, 0x1840, 0x8000, 0x9, 0x7fffffff, 0xfffffffffffffff9}, &(0x7f0000000d80)={0x9, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x8e8c}, &(0x7f0000000dc0)={0x1, 0xffffffff80000000, 0x6b7, 0x4a29, 0x1, 0xbc, 0x9f7, 0x2}, &(0x7f0000000e00), &(0x7f0000000e80)={&(0x7f0000000e40)={0x7fff}, 0x8})
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000ec0))
clock_settime(0x4, &(0x7f0000000f00))
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x434, 0xfff, 0x7, 0x100}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x50000002}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r4, 0x202, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
openat$urandom(0xffffffffffffff9c, &(0x7f0000001140)='/dev/urandom\x00', 0x100, 0x0)

05:23:12 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup3(r0, r0, 0x80000)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x95b)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000002b3, 0x4c000)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:23:12 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f00000007c0)=""/135)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:13 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:13 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000007c0)={'security\x00', 0x95, "cf48a57abea7e8d85e061d880747ad192d261f7326ff8b072c6776b491a3bf35e56c5e3fec5a83ebf9c9fe2218cffcaf9cbabdbac4b03e687e4f231d828c80dccec5523ee3cb2e6b6a46c42e05834edba3edc61f417013c82dce44f10258e5c2f4a8140dafa2f35948490f19ac08b2a975ab178e6e11b56401df17098e6e703ce06c821a148103922ef7a109b89285adfb0df139c3"}, &(0x7f0000000480)=0xb9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

[ 1185.021288] binder: 14883:14886 unknown command 0
[ 1185.038968] binder: 14883:14886 ioctl c0306201 20000140 returned -22
[ 1185.053322] binder: BINDER_SET_CONTEXT_MGR already set
[ 1185.058886] binder: 14883:14886 ioctl 40046207 0 returned -16
05:23:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$getflags(r0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bbc}, {{@in, 0x0, 0xff}, 0x0, @in=@dev}}, 0xe8)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)

05:23:13 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:13 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x3d)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x8, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x101}}, {@mode={'mode', 0x3d, 0x4}}], [{@dont_measure='dont_measure'}, {@obj_user={'obj_user', 0x3d, 'self\xce&\'~'}}]})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4)
clock_nanosleep(0x7, 0x1, &(0x7f0000000140), 0x0)
recvfrom(r0, &(0x7f00000002c0)=""/151, 0x97, 0x40, &(0x7f0000000380)=@llc={0x1a, 0x31b, 0x0, 0x100000000, 0xf3a8, 0x2}, 0x80)
connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80)
sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0)

05:23:13 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1185.135063] binder: 14883:14911 BC_INCREFS_DONE node 1637 has no pending increfs request
[ 1185.151652] binder: 14883:14911 Release 1 refcount change on invalid ref 1 ret -22
[ 1185.164115] binder: 14883:14911 ioctl 80184540 200007c0 returned -22
[ 1185.172822] binder: 14883:14916 BC_ACQUIRE_DONE node 1637 has no pending acquire request
[ 1185.190431] binder: BINDER_SET_CONTEXT_MGR already set
[ 1185.206015] binder: 14898:14919 ioctl 40046207 0 returned -16
[ 1185.218090] binder: 14898:14919 Release 1 refcount change on invalid ref 1 ret -22
[ 1185.812313] binder: 14883:14911 unknown command 0
[ 1185.813736] binder: BINDER_SET_CONTEXT_MGR already set
[ 1185.817725] binder: 14883:14911 ioctl c0306201 20000140 returned -22
[ 1185.823180] binder: 14883:14923 ioctl 40046207 0 returned -16
[ 1185.831516] binder: 14883:14924 Release 1 refcount change on invalid ref 1 ret -22
[ 1185.843851] binder: 14883:14924 ioctl 80184540 200007c0 returned -22
[ 1185.851361] binder: release 14883:14925 transaction 1642 out, still active
[ 1185.858692] binder: release 14883:14886 transaction 1636 out, still active
[ 1185.871180] binder: unexpected work type, 4, not freed
[ 1185.876483] binder: undelivered TRANSACTION_COMPLETE
[ 1185.884801] binder: release 14898:14919 transaction 1639 out, still active
05:23:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:15 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:15 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000, 0x0)
dup3(r0, r0, 0x80000)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:23:15 executing program 4:
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x80100, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
syncfs(r0)
lsetxattr$security_selinux(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:netlabel_mgmt_exec_t:s0-\xdf\x7f\xd5S\x80T\x8ah]\xa3\xa5\x9f\x9a\xba\x85\xa9\xfbK\xdf\xdc\x12<\x893\xf8\xf2\x89\xa7\xe9\xa3\xf1\xa6f\xd0\xd5\x05\xa5Tw\x13Z\xb0x\x87\x89\f\x83\x8b\xfa\xfc)\x06\xc8\xf4 i\xb2\xb3\x97\x03\x82\x9c\x9a\xd3?\xa5e5\x93 \xf2\xfc[\xfdt\xfc\x84\xd2\xad\xf5\x9d\xe9\xbc\xc0\x97\xf5r\xb5\xcf\x91\x03^\x99y\f}\x8a6\xd8P\x84?\xe0\x9f\xdf\xf3\xdfE\xbb\xe6\xee01#x\xce\xba\"\xf7\x13\xdcG\v\xab7\xb4\x0e\xf6\xa0\xcd\xa7\x99\x90pY\t\v\xb3\x86>\x97Z\xd70mW\xf6l', 0xbe, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
chroot(0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000280))
getuid()
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

05:23:15 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:15 executing program 2:

05:23:16 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:16 executing program 2:

05:23:16 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1188.091082] binder: 14932:14938 unknown command 0
[ 1188.097527] binder: 14932:14938 ioctl c0306201 20000140 returned -22
[ 1188.129500] binder: BINDER_SET_CONTEXT_MGR already set
05:23:16 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:16 executing program 2:

[ 1188.137951] binder: 14932:14938 ioctl 40046207 0 returned -16
05:23:16 executing program 2:

[ 1188.211747] binder: 14932:14960 BC_INCREFS_DONE node 1646 has no pending increfs request
[ 1188.221682] binder: 14932:14960 Release 1 refcount change on invalid ref 1 ret -22
[ 1188.234432] binder: 14932:14960 BC_ACQUIRE_DONE node 1646 has no pending acquire request
[ 1188.856034] binder: 14963:14963 unknown command 0
[ 1188.861980] binder: 14963:14963 ioctl c0306201 20000140 returned -22
[ 1188.868700] binder: BINDER_SET_CONTEXT_MGR already set
[ 1188.875093] binder: 14963:14964 ioctl 40046207 0 returned -16
[ 1188.875342] binder: 14963:14965 Release 1 refcount change on invalid ref 1 ret -22
[ 1188.890107] binder: release 14963:14965 transaction 1648 out, still active
[ 1188.900660] binder: release 14932:14938 transaction 1645 out, still active
05:23:19 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:19 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:19 executing program 4:

05:23:19 executing program 5:

05:23:19 executing program 2:

05:23:19 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000480))
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:19 executing program 4:

05:23:19 executing program 4:

05:23:19 executing program 5:

05:23:19 executing program 2:

05:23:19 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:19 executing program 5:

[ 1191.183337] binder: BINDER_SET_CONTEXT_MGR already set
[ 1191.190532] binder: 14970:14988 ioctl 40046207 0 returned -16
[ 1191.197815] binder: 14970:14988 Release 1 refcount change on invalid ref 1 ret -22
[ 1191.871952] binder: BINDER_SET_CONTEXT_MGR already set
[ 1191.877389] binder: 14970:14993 ioctl 40046207 0 returned -16
[ 1191.877920] binder: 14970:14995 Release 1 refcount change on invalid ref 1 ret -22
[ 1191.938697] binder: release 14970:14995 transaction 1654 out, still active
[ 1191.952163] binder: release 14970:14988 transaction 1651 out, still active
05:23:22 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:22 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f00000007c0)=""/135)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_cache\x00')
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
futex(&(0x7f0000000040), 0x1, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x2, 0x1)
r1 = request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000240)='%\x00', 0xfffffffffffffffb)
keyctl$get_security(0x11, r1, &(0x7f00000002c0)=""/174, 0xae)
preadv(r0, &(0x7f0000000480), 0x1000000000000172, 0x0)
pipe2(&(0x7f0000000000), 0x80000)

05:23:22 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:22 executing program 2:
socketpair$unix(0x1, 0x4000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f000000b000)={0x0, 0x0, &(0x7f0000beeff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000000000000000006e8d8fc8d63549000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726667343130362867636d2861657329290000000000000000000000000000000000000000004cb4470ccf23297a103b3d92133e0000000000000000000000000000000000000000000584f400000000000000000060"], 0x13c}}, 0x0)

05:23:22 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = dup(r5)
shutdown(r6, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
getpid()
fallocate(r2, 0x40, 0x3, 0xffb9)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180)=0xffffffffffffffe0, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)})

05:23:22 executing program 2:
r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x141046, 0x80)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffe94}, 0xe3c7)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x2}, 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=""/10, 0xa, <r3=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x10, &(0x7f00000002c0)={&(0x7f0000000100)=""/28, 0x1c, r3}}, 0x10)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0)
ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080))
fdatasync(r2)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x3, r1})
ioctl$KDSETMODE(r2, 0x4b3a, 0x7)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x88, [], 0x9, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/136}, &(0x7f0000000580)=0x78)
prctl$PR_GET_SECUREBITS(0x1b)

05:23:22 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1194.087331] netlink: 76 bytes leftover after parsing attributes in process `syz-executor2'.
05:23:22 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000100)={0x1, 0x8, 0x7ff, 0x6cc, 0x7, 0xffffffffffffff01, 0x9, 0x5, 0xffffffff, 0x200, 0x81, 0x1000})
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30)
dup(r1)
getpgrp(r2)

[ 1194.161624] binder: BINDER_SET_CONTEXT_MGR already set
[ 1194.166964] binder: 15006:15018 ioctl 40046207 0 returned -16
[ 1194.189131] binder: 15006:15018 Release 1 refcount change on invalid ref 1 ret -22
05:23:22 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x3d)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x88)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')

05:23:22 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:22 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'(\x84\x00\x00\x00\x00\x00\x00\x00\b\x00\x10\x00\x00\x00\b', 0x902})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x140)
statx(r2, &(0x7f0000000140)='./file0\x00', 0x100, 0x0, &(0x7f0000000180))
r3 = socket$inet(0x2, 0x3, 0x9)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

[ 1194.896561] binder: BINDER_SET_CONTEXT_MGR already set
[ 1194.902833] binder: 15022:15022 ioctl 40046207 0 returned -16
[ 1194.903915] binder: 15022:15042 Release 1 refcount change on invalid ref 1 ret -22
[ 1194.917994] binder: release 15006:15018 transaction 1657 out, still active
[ 1194.925413] binder: release 15022:15041 transaction 1660 out, still active
05:23:25 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:25 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x0, 0x3, 0x5}, 0xfffffffffffffff7}}, 0x18)
setrlimit(0x7, &(0x7f0000a9cff8))
syz_genetlink_get_family_id$tipc2(0x0)

05:23:25 executing program 4:
r0 = socket$inet(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4, 0x2)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x04\x00', @ifru_data=&(0x7f0000000080)="0870272736e6c51df78de275350b6ca28701251e87f062dd27023747fac22cd9"})

05:23:25 executing program 5:
r0 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x101)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00')
fchdir(0xffffffffffffffff)
write$selinux_access(0xffffffffffffffff, 0x0, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
quotactl(0x2080000201, &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000002c0))
syz_open_dev$loop(0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000380)='&keyring+security\x00', 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r3 = syz_open_pts(r2, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2000, 0x0)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x98, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040004}, 0x40000)

05:23:25 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:25 executing program 2:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000)
mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_flowlabel\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
readahead(r2, 0x4, 0x8001)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
close(r1)
socket$unix(0x1, 0x7, 0x0)

05:23:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup3(r0, r0, 0x80000)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
ioctl(r0, 0x6000000000000000, &(0x7f00000000c0)='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00')
write$P9_RGETLOCK(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='7'], 0x1)
write$P9_RGETLOCK(r2, &(0x7f0000000100)={0x39, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b, '^+mime_type){&nodevcgrouplo'}}, 0x39)

05:23:25 executing program 4:
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x4, 0x57, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x3ff, 0x2, 0x1, r0, 0x7}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)

05:23:25 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:25 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
unlink(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file1\x00'}, 0x10)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$RTC_WIE_OFF(r0, 0x7010)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x2002, 0x0)
close(r0)
close(0xffffffffffffffff)
creat(&(0x7f0000000140)='./file0\x00', 0x0)

05:23:25 executing program 1:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002700)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002780)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0x84, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe48}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2a8f9fad}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc6d}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
sendto$inet(r0, &(0x7f0000000200)="d1844d", 0x3, 0x20000000, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0003000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
select(0x40, &(0x7f0000000040)={0x75, 0x0, 0x10000, 0xffffffff, 0x2, 0x6fa, 0x3, 0x9}, &(0x7f0000000140)={0x283, 0x40, 0xffffffff00000000, 0x2, 0x3, 0x0, 0x100000001, 0xffffffffffffffff}, &(0x7f0000000180)={0x4, 0x40, 0x82e8, 0x6, 0x1a0c, 0x8001, 0xfd4a, 0x462}, &(0x7f00000001c0)={0x77359400})

05:23:25 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]})
stat(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xcb9e, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000080)="c65f59d6bc62cb6bc6465f91bcde287ae05c8597770f3dbb4bcb93d5599d9ea512113856d5c457c92aafc9d2e23ee1e0850a433fc656c909da1d59dbd754df4cfb7e5ea735f508713ebfc3f72eb76e7ab3a1a73caaf49f35ca5bf4470a93f43bc2dfac53ff3d9b6e044338554b", 0x6d, 0x42b4}, {&(0x7f0000000200)="079d632893e621694be0a44d1e5969fe6504a9cbc9456cf3453c0d10def8b87ad53abc5fdb21c97d315fa2e9a905695813811b63e90ccf1978bcff916c8d2217002e65cf3df75763e3d12d1c2c1a361513c16fff68825c79c562829e3e09bd5b3567e47792b5e914d365a84f1821c949fef199f4b6214be62a5f2411d65f3c9f02d22f51b07e9cf09acb85", 0x8b}, {&(0x7f00000002c0)="e17955ca38e227ee55c55920053b91907141ab716b10a1405d41704e9ee8db61e0f480e181a8e888c78825c7f2e2a93780c2c993b2148e003434da8db3dc8f44b3c499191909ce6407e47dfd2563e7d0fe25b83c9413c8a610e3c5c94587c708b56a18d7415b195c57f7d9caa114abc90a709cc04ed102e22a260e039e3f2c6730e1d947c5b42c51ce195a131155d5581518", 0x92, 0x592}, {&(0x7f00000004c0)="0dae5e4be3a15e8c329109ddba4d2908b395c6073685832c5daf47fa48618fccc9e12f34933b27ec856d9f01c5de6aa28920e67c2a072909c84ce818fdae1b1ebe50bcbb78ba447ef8be1ec34018b15dbe4ed291c13b2b0b1bdc3102e1460f2ab0777e159028ee209b902af2d4375545c8aa897a8e0b37d6d90e262e8b35481b1e878a3f1189cbf5a56c3611c4114f63846c413e8c3113ebd56065cb736b886c0322fa96d2f0c6e494785cc1ce02baaa4a37e22152e2fdef86df68283ac4474968ebaa", 0xc3, 0x80}, {&(0x7f0000000100)="3e88f3038591525bdd0e07b77d546c51b22dbb3193cbc4749cecaf7ea1d4db4622f07dd80d785d85430735b893c1328af8030f63855014985044cf18cba91dc021c57c26f9d8095392ee3552c7", 0x4d, 0xffff}], 0x3020000, &(0x7f0000000640)={[{@fat=@sys_immutable='sys_immutable'}, {@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xc60}}, {@euid_lt={'euid<', r1}}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x63, 0x79, 0x35, 0x77, 0x35, 0x64, 0x33], 0x2d, [0x66, 0x62, 0x0, 0x37], 0x2d, [0x39, 0x65, 0x66, 0x77], 0x2d, [0x31, 0x7b, 0x64, 0x77], 0x2d, [0x34, 0x7d, 0x32, 0x75, 0x77, 0x65, 0x66]}}}, {@subj_role={'subj_role', 0x3d, '*cgroupmime_typetrustedselinuxvmnet1'}}]})

[ 1197.255188] FAT-fs (loop4): bogus number of reserved sectors
[ 1197.261811] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1197.329132] FAT-fs (loop4): bogus number of reserved sectors
[ 1197.339317] FAT-fs (loop4): Can't find a valid FAT filesystem
05:23:28 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreq(r0, 0x0, 0x21, &(0x7f0000000480)={@remote, @empty}, 0x8)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/220, &(0x7f0000000180)=0xdc)
ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x1, 0x0, 0xae65, 0x6})

05:23:28 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000000)="220000002100070700be0000040007010a0000e50254a32d447d5a48ff02781e0000", 0xffffff30)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x62)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0xfffffffffffffff8, 0x7ff, 0x8})
write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x222, 'SE Linux', "a13e724bd6e032db"}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x3, 0x8, 0x1, 0x7fff}, 0x10001, 0xffff})

05:23:28 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', r1})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000004080)={0x0, 0x100000000, 0x6, 0x0, 0x0, [{r0, 0x0, 0x8000}, {r0, 0x0, 0x7}, {r0, 0x0, 0x100000001}, {r0}, {r0, 0x0, 0xab}, {r0, 0x0, 0x810f}]})
getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000ca5ffc))
recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)=""/132, 0x84}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/169, 0xa9}, {&(0x7f0000001400)=""/41, 0x29}, {&(0x7f0000001440)=""/59, 0x3b}], 0x7, &(0x7f0000001500)=""/66, 0x42}, 0xb31}, {{&(0x7f0000001580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/13, 0xd}, {&(0x7f0000002640)=""/210, 0xd2}, {&(0x7f0000002740)=""/217, 0xd9}], 0x4, &(0x7f0000002880)=""/215, 0xd7}, 0x4}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002a00)=""/12, 0xc}, {&(0x7f0000002a40)=""/178, 0xb2}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/163, 0xa3}, {&(0x7f0000003bc0)=""/65, 0x41}, {&(0x7f0000003c40)=""/1, 0x1}], 0x6, &(0x7f0000003d00)=""/224, 0xe0}, 0x84}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003e00)=""/41, 0x29}], 0x1, &(0x7f0000003e80)=""/114, 0x72}, 0x5c3}], 0x4, 0x10000, &(0x7f0000004000)={0x0, 0x1c9c380})
r2 = fcntl$getown(r0, 0x9)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000004180)=0x1)
sched_getscheduler(r2)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000004040)={0x8, 0x7, 0x9})
dup3(r0, r0, 0x80000)

05:23:28 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000480)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @local}, 0xc)
r1 = socket(0x10, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
r2 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000000)=""/100, &(0x7f00000000c0)=0x64)
write(r2, &(0x7f0000000080)="220000002000070700be000009000701020000000000000000200000050013800155", 0x22)

05:23:28 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ftruncate(r0, 0x1)
pause()
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0)
write$selinux_context(r1, &(0x7f0000000280)='system_u:object_r:getty_var_run_t:s0\x00', 0x25)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt(r2, 0x5, 0x1, &(0x7f0000000080)=""/4, &(0x7f0000000180)=0x4)
write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x8001, 0x100000001, 0x1ff, 0xffff, 0x0, 0xfffffffffffffff8, 0x8002, 0x0, 0x6, 0x1, 0x1b, 0x5, 0x6, 0xfffffffffffffffb, 0x2, 0x200, 0x5, 0x9, 0x8001, 0x7, 0x8, 0xc9, 0x5, 0x3, 0x3f, 0x216, 0x20, 0x9, 0x4, 0x81, 0x10000, 0x8, 0x1, 0x9, 0x9, 0x5, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0xc63e2bd47804681e, 0x74, 0xbf8, 0x6, 0x101, 0x80, 0x72e4}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0x8)

05:23:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:28 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x2a8, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x101, @mcast1, 0x62c}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba5a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x90}, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})

05:23:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1200.229571] binder: BINDER_SET_CONTEXT_MGR already set
[ 1200.235908] binder: 15135:15138 ioctl 40046207 0 returned -16
[ 1200.254865] binder_alloc: binder_alloc_mmap_handler: 15135 20001000-20004000 already mapped failed -16
[ 1200.266582] binder: BINDER_SET_CONTEXT_MGR already set
[ 1200.272528] binder: 15135:15138 ioctl 40046207 0 returned -16
05:23:28 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:28 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
clock_settime(0x0, &(0x7f0000000140)={r1, r2+30000000})
r3 = accept(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000000)=0x80)
getsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000200)=""/235, &(0x7f0000000080)=0xeb)

[ 1200.279242] binder: release 15135:15144 transaction 1664 out, still active
[ 1200.286763] binder: undelivered TRANSACTION_COMPLETE
[ 1200.296153] binder: release 15135:15138 transaction 1663 out, still active
[ 1200.309622] binder: undelivered TRANSACTION_COMPLETE
05:23:31 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:31 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfd43)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x3}, 0x4)
clock_gettime(0x0, &(0x7f0000000640)={0x0, <r1=>0x0})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x11a)
sendmmsg(r3, &(0x7f0000007e00), 0x400000000000087, 0x0)

05:23:31 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup2(0xffffffffffffffff, r0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x7)
request_key(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0xfffffffffffffffb)
openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r4=>0x0})
pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x649002f0928b9c08)

05:23:31 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000000380)=0x800, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2341, 0x9061, 0x0, 0x8, 0x1})
fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "eb30d71569fad6988c8d4b725d50cca6"}, 0x11, 0x3)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10)
sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x80, 0x0}, 0x8001)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000001540)="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", 0x7d1}], 0x1)

05:23:31 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'bond0\x00', {0x2, 0x4e22, @remote}})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
socketpair(0xd, 0x5, 0x28a, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f00000001c0)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x5b, 0xc}]}, 0xc, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000fc0)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400})
recvfrom$unix(r1, &(0x7f0000000000)=""/17, 0x11, 0x40000000, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
getpeername$inet(r1, &(0x7f0000000080), &(0x7f0000000180)=0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x63d}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10)
sendmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2dc, &(0x7f0000000d80)}}], 0x1, 0x40400d4)

05:23:31 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x404, 0x0, 0x0, 0x5})
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100))
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
socket$inet(0x2, 0xb, 0x800)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x10019)
sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184)
shutdown(r1, 0x400000000000001)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x3, 0x1, 0x7, 0x3, 0x9}, 0x7, 0x5})

05:23:31 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:31 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:31 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:31 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:31 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x0, 0x4}, 0x3, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x4, 0x5, 0x81})

05:23:34 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:34 executing program 1:
memfd_create(&(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x802, 0x1)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0)
syz_open_pts(0xffffffffffffff9c, 0x10000)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x80800)
r2 = dup2(r1, r0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b1dc1bb091062690dcc319f9a0f998486c39f29d"], 0x14)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
fallocate(r2, 0x0, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socket$packet(0x11, 0x3, 0x300)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
ioctl$LOOP_CLR_FD(r4, 0x4c01)

05:23:34 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:34 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
dup3(r0, r0, 0x0)

05:23:34 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x24020400)
mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
write(r1, &(0x7f0000000080)="2600000022004701050000000000000005006d20002b1f00c05d080a4a71f10101c7033400b0", 0x26)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8)
connect$packet(r1, &(0x7f0000000240)={0x11, 0x1b, r2, 0x1, 0xfffffffffffffbed, 0x6, @random="6db5360426a0"}, 0x14)
connect$netlink(r1, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000025c0), 0x4)
sendto(r1, &(0x7f0000000080), 0x16, 0x0, 0x0, 0xfd92)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x1, 0x4)

05:23:34 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:34 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

[ 1206.205387] 
[ 1206.207068] ======================================================
[ 1206.213405] WARNING: possible circular locking dependency detected
[ 1206.219724] 4.14.96+ #20 Not tainted
[ 1206.223434] ------------------------------------------------------
[ 1206.229753] syz-executor2/15215 is trying to acquire lock:
[ 1206.235371]  (&pipe->mutex/1){+.+.}, at: [<ffffffffaa5722c6>] fifo_open+0x156/0x9b0
[ 1206.243185] 
[ 1206.243185] but task is already holding lock:
05:23:34 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:34 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1206.249160]  (&sig->cred_guard_mutex){+.+.}, at: [<ffffffffaa56c6e1>] prepare_bprm_creds+0x51/0x110
[ 1206.258445] 
[ 1206.258445] which lock already depends on the new lock.
[ 1206.258445] 
[ 1206.266762] 
[ 1206.266762] the existing dependency chain (in reverse order) is:
[ 1206.274387] 
[ 1206.274387] -> #2 (&sig->cred_guard_mutex){+.+.}:
[ 1206.280718] 
[ 1206.280718] -> #1 (&p->lock){+.+.}:
[ 1206.285833] 
[ 1206.285833] -> #0 (&pipe->mutex/1){+.+.}:
[ 1206.291466] 
[ 1206.291466] other info that might help us debug this:
[ 1206.291466] 
[ 1206.299612] Chain exists of:
05:23:34 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:34 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1206.299612]   &pipe->mutex/1 --> &p->lock --> &sig->cred_guard_mutex
[ 1206.299612] 
[ 1206.310464]  Possible unsafe locking scenario:
[ 1206.310464] 
[ 1206.316524]        CPU0                    CPU1
[ 1206.321187]        ----                    ----
[ 1206.325850]   lock(&sig->cred_guard_mutex);
[ 1206.330173]                                lock(&p->lock);
[ 1206.335798]                                lock(&sig->cred_guard_mutex);
[ 1206.342637]   lock(&pipe->mutex/1);
[ 1206.346270] 
[ 1206.346270]  *** DEADLOCK ***
[ 1206.346270] 
05:23:34 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1206.352339] 1 lock held by syz-executor2/15215:
[ 1206.357005]  #0:  (&sig->cred_guard_mutex){+.+.}, at: [<ffffffffaa56c6e1>] prepare_bprm_creds+0x51/0x110
[ 1206.366673] 
[ 1206.366673] stack backtrace:
[ 1206.371183] CPU: 1 PID: 15215 Comm: syz-executor2 Not tainted 4.14.96+ #20
[ 1206.378197] Call Trace:
[ 1206.380795]  dump_stack+0xb9/0x10e
[ 1206.384340]  print_circular_bug.isra.0.cold+0x2dc/0x425
[ 1206.389738]  ? __lock_acquire+0x2d83/0x3fa0
[ 1206.394089]  ? trace_hardirqs_on+0x10/0x10
[ 1206.398332]  ? check_preemption_disabled+0x35/0x1f0
[ 1206.403363]  ? __lock_acquire+0x56a/0x3fa0
[ 1206.407608]  ? do_filp_open+0x1a1/0x280
[ 1206.411594]  ? lock_acquire+0x10f/0x380
[ 1206.415575]  ? fifo_open+0x156/0x9b0
[ 1206.419298]  ? fifo_open+0x156/0x9b0
[ 1206.423014]  ? __mutex_lock+0xf7/0x1430
[ 1206.426991]  ? fifo_open+0x156/0x9b0
[ 1206.430714]  ? fifo_open+0x156/0x9b0
[ 1206.434432]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[ 1206.439370]  ? __ww_mutex_wakeup_for_backoff+0x210/0x210
[ 1206.444902]  ? mark_held_locks+0xa6/0xf0
[ 1206.448970]  ? fifo_open+0x284/0x9b0
[ 1206.452685]  ? lock_downgrade+0x5d0/0x5d0
[ 1206.456822]  ? lock_acquire+0x10f/0x380
[ 1206.460829]  ? fifo_open+0x243/0x9b0
[ 1206.464532]  ? fifo_open+0x156/0x9b0
[ 1206.468232]  ? fifo_open+0x156/0x9b0
[ 1206.471934]  ? do_dentry_open+0x41b/0xd60
[ 1206.476088]  ? pipe_release+0x240/0x240
[ 1206.480173]  ? vfs_open+0x105/0x230
[ 1206.483797]  ? path_openat+0xb6b/0x2b70
[ 1206.487764]  ? path_mountpoint+0x9a0/0x9a0
[ 1206.491989]  ? kasan_kmalloc.part.0+0xa6/0xd0
[ 1206.496475]  ? kmemdup+0x23/0x50
[ 1206.499831]  ? selinux_cred_prepare+0x3e/0x90
[ 1206.504314]  ? graph_lock+0xe0/0xe0
[ 1206.507927]  ? do_filp_open+0x1a1/0x280
[ 1206.511889]  ? may_open_dev+0xe0/0xe0
[ 1206.515680]  ? check_preemption_disabled+0x35/0x1f0
[ 1206.520681]  ? perf_trace_lock+0x11e/0x4e0
[ 1206.524904]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[ 1206.529818]  ? perf_trace_lock_acquire+0x4e0/0x4e0
[ 1206.534738]  ? do_open_execat+0xf7/0x5c0
[ 1206.538790]  ? setup_arg_pages+0x710/0x710
[ 1206.543011]  ? do_execveat_common.isra.0+0x674/0x1c30
[ 1206.548188]  ? lock_acquire+0x10f/0x380
[ 1206.552148]  ? do_execveat_common.isra.0+0x422/0x1c30
[ 1206.557327]  ? check_preemption_disabled+0x35/0x1f0
[ 1206.562334]  ? do_execveat_common.isra.0+0x6b3/0x1c30
[ 1206.567518]  ? prepare_bprm_creds+0x110/0x110
[ 1206.572001]  ? getname_flags+0x22e/0x550
[ 1206.576065]  ? SyS_execve+0x34/0x40
[ 1206.579677]  ? setup_new_exec+0x770/0x770
[ 1206.583813]  ? do_syscall_64+0x19b/0x4b0
[ 1206.587868]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
05:23:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:37 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:37 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:37 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:37 executing program 1:
memfd_create(&(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x802, 0x1)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0)
syz_open_pts(0xffffffffffffff9c, 0x10000)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x80800)
r2 = dup2(r1, r0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b1dc1bb091062690dcc319f9a0f998486c39f29d"], 0x14)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
fallocate(r2, 0x0, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socket$packet(0x11, 0x3, 0x300)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
ioctl$LOOP_CLR_FD(r4, 0x4c01)

05:23:37 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x24020400)
mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
write(r1, &(0x7f0000000080)="2600000022004701050000000000000005006d20002b1f00c05d080a4a71f10101c7033400b0", 0x26)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8)
connect$packet(r1, &(0x7f0000000240)={0x11, 0x1b, r2, 0x1, 0xfffffffffffffbed, 0x6, @random="6db5360426a0"}, 0x14)
connect$netlink(r1, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000025c0), 0x4)
sendto(r1, &(0x7f0000000080), 0x16, 0x0, 0x0, 0xfd92)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x1, 0x4)

05:23:37 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:37 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)

05:23:37 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x2)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:37 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:37 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)

05:23:37 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x2)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x3f)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:40 executing program 1:
memfd_create(&(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x802, 0x1)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0)
syz_open_pts(0xffffffffffffff9c, 0x10000)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x80800)
r2 = dup2(r1, r0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b1dc1bb091062690dcc319f9a0f998486c39f29d"], 0x14)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
fallocate(r2, 0x0, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socket$packet(0x11, 0x3, 0x300)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
ioctl$LOOP_CLR_FD(r4, 0x4c01)

05:23:40 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x2)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:40 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)

05:23:40 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x24020400)
mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
write(r1, &(0x7f0000000080)="2600000022004701050000000000000005006d20002b1f00c05d080a4a71f10101c7033400b0", 0x26)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8)
connect$packet(r1, &(0x7f0000000240)={0x11, 0x1b, r2, 0x1, 0xfffffffffffffbed, 0x6, @random="6db5360426a0"}, 0x14)
connect$netlink(r1, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000025c0), 0x4)
sendto(r1, &(0x7f0000000080), 0x16, 0x0, 0x0, 0xfd92)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x1, 0x4)

05:23:40 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)

05:23:40 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(0xffffffffffffffff, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:40 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)

05:23:40 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)

05:23:40 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)

05:23:40 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)

05:23:40 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)

05:23:43 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)

05:23:43 executing program 1:
memfd_create(&(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x802, 0x1)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0)
syz_open_pts(0xffffffffffffff9c, 0x10000)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x80800)
r2 = dup2(r1, r0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b1dc1bb091062690dcc319f9a0f998486c39f29d"], 0x14)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
fallocate(r2, 0x0, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socket$packet(0x11, 0x3, 0x300)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
ioctl$LOOP_CLR_FD(r4, 0x4c01)

05:23:43 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:43 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(0xffffffffffffffff, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

05:23:43 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x20c, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setown(r3, 0x8, r2)
tkill(r0, 0x16)
creat(&(0x7f00001c0000)='./file0\x00', 0x0)

05:23:43 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x24020400)
mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
write(r1, &(0x7f0000000080)="2600000022004701050000000000000005006d20002b1f00c05d080a4a71f10101c7033400b0", 0x26)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8)
connect$packet(r1, &(0x7f0000000240)={0x11, 0x1b, r2, 0x1, 0xfffffffffffffbed, 0x6, @random="6db5360426a0"}, 0x14)
connect$netlink(r1, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000025c0), 0x4)
sendto(r1, &(0x7f0000000080), 0x16, 0x0, 0x0, 0xfd92)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x1, 0x4)

05:23:43 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)

05:23:43 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f0000000140)=0xc)
getpriority(0x2, r4)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:43 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)

05:23:43 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)

05:23:43 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x0)
getpriority(0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:43 executing program 1:
memfd_create(&(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x802, 0x1)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0)
syz_open_pts(0xffffffffffffff9c, 0x10000)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x80800)
r2 = dup2(r1, r0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b1dc1bb091062690dcc319f9a0f998486c39f29d"], 0x14)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
fallocate(r2, 0x0, 0x40000, 0xfff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socket$packet(0x11, 0x3, 0x300)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0x8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)

05:23:43 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)

05:23:43 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)

05:23:43 executing program 5:
r0 = eventfd2(0x0, 0x0)
r1 = dup(r0)
io_setup(0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x799)
tkill(r2, 0x11)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getpriority(0x2, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

05:23:43 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(0xffffffffffffffff, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)