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", 0x1000, 0x1, 0x1ff}, {&(0x7f0000002180)="65ba9a26704d54316a530bf0a33e7f7ad2fd834c7a2852e19971ef265527865ba7ece7f20d6d4805eab56aabb29d5a4799e0b548cc013088442838dba22e19c68a4a7ce3c9074b9df544471497c09d118e611e70e21fdc859c9d4cfc3deed370485fab3a3b3fbac175983b0d6370273f48be88f8a3e4f824e1deaf49289eee23784719a86771b3b7da60665fd4688df7d40abd", 0x93, 0x5, 0x1}, {&(0x7f0000002240)="169533b686d5631a4e085f4df71f009cd8881a032542c6fd62e98c62606e8226b5fbf2afee5f2d8ea9544af5fcd19380db4e8c96eaae0393a3ab4661520c9d71", 0x40, 0x7fff, 0x86e}], 0x30000) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 03:34:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="3f799db2"], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e100000000000000000000000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de271a619b97f4f9e00737"], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 402.508142] Dev loop5: unable to read RDB block 6 [ 402.516586] loop5: unable to read partition table [ 402.523663] loop5: partition table beyond EOD, [ 402.525658] binder: 23549:23553 unknown command -1298302657 [ 402.525667] binder: 23549:23553 ioctl c0306201 2000dfd0 returned -22 [ 402.525791] binder: 23549:23553 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 402.525797] binder: 23549:23553 unknown command 1213584373 [ 402.525804] binder: 23549:23553 ioctl c0306201 20000180 returned -22 [ 402.526886] binder: 23549:23553 unknown command 536871424 [ 402.526894] binder: 23549:23553 ioctl c0306201 20008fd0 returned -22 [ 402.526924] binder: 23549:23554 unknown command -1298302657 [ 402.526931] binder: 23549:23554 ioctl c0306201 2000dfd0 returned -22 [ 402.526998] binder: 23549:23553 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 402.527004] binder: 23549:23553 unknown command 1213584373 [ 402.527010] binder: 23549:23553 ioctl c0306201 20000180 returned -22 [ 402.615110] truncated [ 402.617614] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 404.600049] IPVS: Creating netns size=2536 id=42 [ 404.771300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 404.785269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 404.841998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 404.855300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 404.911464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 404.924838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 404.940020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.954559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.607231] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 405.640732] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 405.646876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.653492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:34:46 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x6, 0x8, 0x7}}, 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',>Z', @ANYRES32=r1, @ANYBLOB="00000000000000000c0001000000000000000000"], 0x2c}}, 0x0) 03:34:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000012fc7)}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0xa0, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=""/160}, &(0x7f00000001c0)=0x78) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e100000000000000000000000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de271a619b97f4f9e00737"], 0x0, 0x0, &(0x7f0000000100)}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x48080, 0x0) 03:34:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffff008}, {0x6}]}, 0x10) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000100)=[r2]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setgroups(0x40000000000001c7, &(0x7f0000000340)=[r3, r3]) sendmmsg(r0, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000006c0)}}, {{&(0x7f00000058c0)=@can, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x3d5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) 03:34:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000300)=0x1) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)=""/209, &(0x7f0000000100)=0xd1) munmap(&(0x7f000004a000/0x1000)=nil, 0x1000) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) 03:34:46 executing program 6: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x200000, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x100, 0x4) r2 = dup(r1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r3, 0x80003) sendfile(r1, r3, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x8, 0x4) 03:34:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563044000000200"], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0eae464000000000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106308400020000000002000"], 0x0, 0x0, &(0x7f0000000100)}) 03:34:46 executing program 4: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x200000, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x100, 0x4) r2 = dup(r1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r3, 0x80003) sendfile(r1, r3, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x8, 0x4) 03:34:46 executing program 0: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x72109c5fef5d34d3) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x1}) r0 = memfd_create(&(0x7f0000000140)='selinux@nodevvmnet0@(+\\nodevsystemnodev&{procsecurity(posix_acl_accesscpuset\x00', 0x3) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @empty, 0x0}, &(0x7f0000000200)=0xc) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@multicast1, 0x4e21, 0xd8e5, 0x4e23, 0x0, 0x0, 0x803e18bb441d19e1, 0x80, 0x3b, r1, r2}, {0xfffffffffffffff8, 0x9, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x6}, {0x7f, 0xfff, 0x2, 0x2}, 0x0, 0x6e6bbd, 0x2, 0x1, 0x3, 0x1}, {{@in=@remote, 0x4d4, 0x6c}, 0x2, @in6, 0x0, 0x0, 0x2, 0x7, 0x7fffffff, 0x6, 0x20}}, 0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) prctl$intptr(0x26, 0x4) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f00000000c0)) rt_sigprocmask(0x1, &(0x7f00000002c0)={0x100000001}, &(0x7f0000000440), 0x8) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 03:34:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x185) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe1f5bc52cac82a1a3ca3a0c23c6af4b43"], 0x2a) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) write$P9_RLOPEN(r3, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x0, 0x0, 0x1}, 0x88b}}, 0x18) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) open$dir(&(0x7f00000013c0)='./file0\x00', 0x8000a0, 0x0) [ 405.918298] binder: 23944:23948 Acquire 1 refcount change on invalid ref 131072 ret -22 [ 405.924989] binder: 23941:23955 unknown command 0 [ 405.924997] binder: 23941:23955 ioctl c0306201 20012000 returned -22 [ 405.925355] binder: 23941:23955 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 405.929478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23949 comm=syz-executor1 03:34:46 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) r1 = memfd_create(&(0x7f0000000040)='\\\x00', 0x1) setsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000080), 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_team\x00', 0xfffffffffffffe23) sendto$inet(r1, &(0x7f0000000480)="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", 0xa4, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) [ 405.966999] binder: 23944:23948 unknown command 1078373902 [ 405.973274] binder: 23941:23963 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 405.973282] binder: 23941:23963 unknown command 1213584373 [ 405.973291] binder: 23941:23963 ioctl c0306201 20000180 returned -22 [ 405.999495] binder: 23944:23948 ioctl c0306201 20008fd0 returned -22 03:34:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="0c631000"], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000300)={0x2, 0xbe47, 0x800, 'queue1\x00', 0x4d62}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:34:46 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000280), &(0x7f0000000300)=0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = memfd_create(&(0x7f00000003c0)='/de\x00\x00\x00', 0x3) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000200)=""/46) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, &(0x7f0000000240), r3, &(0x7f00000001c0)=0x2, 0x8, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) [ 406.051725] binder: 23944:23948 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 406.062417] binder: 23944:23948 unknown command 1704546753 [ 406.080330] binder: 23944:23948 ioctl c0306201 20000040 returned -22 [ 406.089249] binder: 23944:23948 BC_DEAD_BINDER_DONE 0020000000002000 not found 03:34:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x10}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0xb64) 03:34:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0xffffffffffffffff) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x16}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffffffffffb, @remote, 0x9}, 0x1c) poll(&(0x7f0000000080)=[{r0, 0xa1}, {r2, 0xa}, {r2, 0x4010}, {r2, 0x40}], 0x4, 0xff) 03:34:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4, @remote}, 0xffffffffffffff7c) r2 = socket(0xa, 0x1, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000240), 0x4) [ 406.152073] binder: 23978:23981 Acquire 1 refcount change on invalid ref 0 ret -22 [ 406.173709] binder: 23978:23981 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:34:46 executing program 0: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) prctl$intptr(0x29, 0x0) [ 406.200003] binder: 23978:23981 unknown command 1073932 [ 406.213742] binder: 23978:23981 ioctl c0306201 2000dfd0 returned -22 03:34:46 executing program 1: r0 = getpid() r1 = perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0xfffffffffffffc00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) socketpair(0x0, 0x0, 0x7, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000580)=0x5) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000600)="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") r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) keyctl$update(0x2, 0x0, &(0x7f0000000280), 0x0) r6 = open(&(0x7f0000001980)='./bus\x00', 0x800, 0x1) fchdir(r4) ioctl$int_out(r1, 0x2, &(0x7f00000005c0)) r7 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) read(r3, &(0x7f0000001700)=""/235, 0xeb) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001900)={0x100, 0x9, 0x1, 0xffffffffffffffc7, 0x5, 0x80000001}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3fcedd3eafc1622f7227db317569fba12e9024c1fe"]) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000001680)={{0xa, 0x4e21, 0x1, @remote, 0x3}, {0xa, 0x4e24, 0x200, @local, 0x5e00}, 0x7, [0x3d, 0xff, 0x7, 0x1902, 0x81, 0x100000001, 0x3, 0x8]}, 0x5c) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000001640)={0xa, 0x0, 0x3f, 0x84}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x200101, 0x0) write$evdev(r7, &(0x7f0000001880)=[{{0x77359400}, 0x0, 0x0, 0x100}, {{0x77359400}, 0x401, 0x4}, {{0x77359400}, 0x9000000000, 0xff, 0x9}, {{}, 0x3ff, 0x3, 0x80000001}], 0x60) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000300)) epoll_create(0x10000) sendfile(r7, r7, &(0x7f00000000c0), 0x8080fffffffe) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x10000000000, 0x101, 0x0, 0x6}, 'syz0\x00', 0x4c}) ioctl$RTC_VL_CLR(r3, 0x7014) [ 406.248671] binder: 23978:23981 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 406.256111] binder: 23978:23981 unknown command 1704546753 [ 406.262273] binder: 23978:23981 ioctl c0306201 20000040 returned -22 [ 406.283397] binder: 23978:23981 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 406.481645] FAT-fs (loop1): error, invalid access to FAT (entry 0x000001c5) [ 406.489082] FAT-fs (loop1): Filesystem has been set read-only [ 406.495657] FAT-fs (loop1): error, invalid access to FAT (entry 0x000001c5) [ 406.517992] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 406.529843] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 03:34:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xb81, 0x0) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x6007}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="8487028fd97d", @local, @dev={[], 0x16}, @remote}}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e100000000000000000000000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de271a619b97f4f9e00737"], 0x0, 0x0, &(0x7f0000000100)}) 03:34:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffff008}, {0x6}]}, 0x10) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000100)=[r2]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setgroups(0x40000000000001c7, &(0x7f0000000340)=[r3, r3]) sendmmsg(r0, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000006c0)}}, {{&(0x7f00000058c0)=@can, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x3d5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) 03:34:47 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=""/100, &(0x7f0000000280)=0x64) flock(r0, 0x2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x3ff) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000200)=0x100000) ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 03:34:47 executing program 6: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x200000, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x100, 0x4) r2 = dup(r1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r3, 0x80003) sendfile(r1, r3, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x8, 0x4) 03:34:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000300)={{0x1, 0x1, 0x3, 0x2, 0x4}, 0x5, 0x8, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:34:47 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@can, &(0x7f0000000080)=0x80, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000005c0)=""/220, &(0x7f0000000140)=0xdc) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open$dir(&(0x7f0000000580)='./file0\x00', 0x200000, 0x0) fstat(r3, &(0x7f0000000180)) 03:34:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x40000000000e800, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404010a0200027400f801", 0x17}], 0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000002c0)={0xc, @broadcast, 0x4e20, 0x0, 'wlc\x00', 0x11, 0x10000, 0x6c}, 0x2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x7, 0x7c75, 0x34}) fchdir(r0) r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) write$sndseq(r1, &(0x7f0000000000)=[{0x2, 0x101, 0xdb2, 0x0, @time, {}, {}, @result}], 0x30) dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) fanotify_init(0x20, 0x40000) umount2(&(0x7f0000000040)='./file0\x00', 0x0) accept$inet(0xffffffffffffff9c, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) 03:34:47 executing program 4: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x200000, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x100, 0x4) r2 = dup(r1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r3, 0x80003) sendfile(r1, r3, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x8, 0x4) [ 406.723338] binder: 23941:23963 unknown command 0 [ 406.729851] binder: 23941:23963 ioctl c0306201 20012000 returned -22 [ 406.731311] binder: 23941:24022 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 406.731433] binder: 23941:24022 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 406.731439] binder: 23941:24022 unknown command 1213584373 [ 406.731448] binder: 23941:24022 ioctl c0306201 20000180 returned -22 [ 406.829914] binder: 24033:24039 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 406.841227] binder: 24027:24041 Acquire 1 refcount change on invalid ref 0 ret -22 [ 406.857766] binder: 24033:24039 unknown command 1213584373 03:34:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffff008}, {0x6}]}, 0x10) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000100)=[r2]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setgroups(0x40000000000001c7, &(0x7f0000000340)=[r3, r3]) sendmmsg(r0, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000006c0)}}, {{&(0x7f00000058c0)=@can, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x3d5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 406.857776] binder: 24033:24039 ioctl c0306201 20000180 returned -22 [ 406.870317] binder: 24033:24039 unknown command 536871424 03:34:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) r2 = socket(0x10, 0x2, 0xfffffffffffffffb) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@loopback, @multicast1, 0x0}, &(0x7f0000000680)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000800)={@loopback, @broadcast, 0x0}, &(0x7f0000000840)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000880)={@empty, @remote, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r3, @ANYBLOB="000029bd7000fe2ab9777b00000000000100", @ANYRES32=r4, @ANYBLOB="a00102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000700000008000600", @ANYRES32=r7], 0x1bc}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r9, &(0x7f0000000340)='ns/cgroup\x00') getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) connect$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x8001, 0x6, @random="79c4b71411c2"}, 0x14) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="df2e46c6f9c5ab286c5e97f0115d6e"], 0x1, 0x0, &(0x7f0000000200)='\f'}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedreceive(r11, &(0x7f00000003c0)=""/235, 0xeb, 0x1, &(0x7f00000004c0)={0x77359400}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e100000000000000000000000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de271a619b97f4f9e00737"], 0x0, 0x0, &(0x7f0000000100)}) [ 406.870326] binder: 24033:24039 ioctl c0306201 20008fd0 returned -22 03:34:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x40000000000e800, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404010a0200027400f801", 0x17}], 0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000002c0)={0xc, @broadcast, 0x4e20, 0x0, 'wlc\x00', 0x11, 0x10000, 0x6c}, 0x2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x7, 0x7c75, 0x34}) fchdir(r0) r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) write$sndseq(r1, &(0x7f0000000000)=[{0x2, 0x101, 0xdb2, 0x0, @time, {}, {}, @result}], 0x30) dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) fanotify_init(0x20, 0x40000) umount2(&(0x7f0000000040)='./file0\x00', 0x0) accept$inet(0xffffffffffffff9c, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) [ 406.870625] binder: 24033:24039 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 406.870631] binder: 24033:24039 unknown command 1213584373 [ 406.870638] binder: 24033:24039 ioctl c0306201 20000180 returned -22 [ 406.897148] binder: 24027:24050 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 406.979653] binder: 24027:24054 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 406.979700] binder: 24027:24054 unknown command 1704546753 03:34:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c4000000000f6b1ca554ce293a64b1041cf66f572da0746780c1e393beb5582aa7f6a1ced9fbfb2d2d6a9361d78ac73fbe0d0c744c6d5d63feb7436d5158f8e59d27819ebbdeba7fc"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d35527ee69ae8c655472b3485d2f6af7db0850e1000000000000000000000000001a5eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de27"], 0x0, 0x0, &(0x7f0000000100)}) [ 406.979708] binder: 24027:24054 ioctl c0306201 20000040 returned -22 [ 406.979925] binder: 24027:24054 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:34:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x40000000000e800, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404010a0200027400f801", 0x17}], 0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000002c0)={0xc, @broadcast, 0x4e20, 0x0, 'wlc\x00', 0x11, 0x10000, 0x6c}, 0x2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x7, 0x7c75, 0x34}) fchdir(r0) r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) write$sndseq(r1, &(0x7f0000000000)=[{0x2, 0x101, 0xdb2, 0x0, @time, {}, {}, @result}], 0x30) dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) fanotify_init(0x20, 0x40000) umount2(&(0x7f0000000040)='./file0\x00', 0x0) accept$inet(0xffffffffffffff9c, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) 03:34:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c400000000037a2cd47fce01777eb1abb276f9bd5013893a280804428c6a2273933a84ff55ecd7931c1f0ee8418f1186de37d4d78b63b690b4595ff0f685e13433569809a5be005a96ad68a766e8f9539182edb94321ea71e0ee48f099a73b9bb74e71ffae7cb346869de35a320c8b654369b2766344dfdcc5e588d02079a17e16d3074b4c329669dacb4cd8f54cbf39635a64fe2a665a65831cf02868a"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e100000000000000000000000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de271a619b97f4f9e00737"], 0x0, 0x0, &(0x7f0000000100)}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80000, 0x0) r3 = dup3(r0, r1, 0x80000) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r3) [ 407.002991] binder: 24056:24058 unknown command -968479009 [ 407.002999] binder: 24056:24058 ioctl c0306201 2000dfd0 returned -22 [ 407.003272] binder: 24056:24058 BC_DEAD_BINDER_DONE 6a4895a289000000 not found 03:34:47 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=""/100, &(0x7f0000000280)=0x64) flock(r0, 0x2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x3ff) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000200)=0x100000) ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 407.003278] binder: 24056:24058 unknown command 1213584373 [ 407.003285] binder: 24056:24058 ioctl c0306201 20000180 returned -22 03:34:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e100000000000000000000000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de271a619b97f4f9e00737"], 0x0, 0x0, &(0x7f0000000100)}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) [ 407.023526] binder: 24056:24066 unknown command -968479009 [ 407.023631] binder: 24056:24066 ioctl c0306201 2000dfd0 returned -22 [ 407.023771] binder: 24056:24068 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 407.023781] binder: 24056:24068 unknown command 1213584373 03:34:47 executing program 1: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="3ce5d826ddc3d28f1f8bfe08066e230240157199c3f0e674ebae1027481e5458206075a5cae18968caa46d5acf06a4538d448c983aaee4284e4f87499e544e368f6a28d09a91ba08dcb61aee83ab8694b137bc9f1fb6c8078996621d682ffa30ab788b9137862bc38289b5e2025e6e9422d854d938534a7fa7ae3003be2a7400309e79a86a37d62e2fe76e33f0610869cca2d02743dcbcf245c32825f23bbf62d0b9f243cd5b855420c68d9efe1ae98128fc92ea71975260fc8c865b66b83c502e9bd82427d56cc9baca5f6440e08e32e108c77cabf1f5") remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1fffffe, 0x1, 0xfffffffffffffffe) [ 407.023788] binder: 24056:24068 ioctl c0306201 20000180 returned -22 [ 407.215892] binder: 24077:24078 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 407.215899] binder: 24077:24078 unknown command 659936245 03:34:47 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x200000, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000300)=@generic={0x3, 0x4, 0x80000000}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100070aa8f7020400000000fcff", 0x58}], 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x280000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x81) getsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f0000000040)=""/69, &(0x7f00000000c0)=0x45) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) ptrace$setregs(0xd, r3, 0x4, &(0x7f00000001c0)="9ec8983b6c33a1c750a5c20adc876f22a0689bfc19e08a63cab6f6983d7be01dea2574f4b3c22a291be94aa2b71d3efa6b8599744788d7fb64e6ce09b296887b8ecb2a57a337b264fe31bf84b8e01971ab5e438cf22db7c1cc7125a847e35bef0a5f39618275063ec687cf0befbb9ddec5fe0d36b1a2b0fbdb92eaef0324340597299d3bd222bc1bd8bb444b43dbf645c1f888bcea1ddc74575c3716d4a401b062e849ef20f8af6101b08df9ce02f13e56e6de58b945494759317e132f38464af90e89e17523c324a7623e059e8ce9de3b71b6b22da0a97675b150a26db996bdabf8813b08bd3ff7bc638a7c30a9e6b7ec5dd00e") 03:34:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0x4, 0x6}, 0x1, 0x5, 0xb7, {0xb4fb, 0x400e}, 0x200, 0x3f}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="6d85a32600000000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e100000000000000000000000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de271a619b97f4f9e00737"], 0x0, 0x0, &(0x7f0000000100)}) [ 407.215906] binder: 24077:24078 ioctl c0306201 20000180 returned -22 [ 407.292240] binder: 24083:24084 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 407.292248] binder: 24083:24084 unknown command 1213584373 [ 407.292255] binder: 24083:24084 ioctl c0306201 20000180 returned -22 [ 407.304530] binder: 24083:24089 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 407.304537] binder: 24083:24089 unknown command 1213584373 [ 407.304545] binder: 24083:24089 ioctl c0306201 20000180 returned -22 [ 407.374427] binder: 24093:24096 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 407.374435] binder: 24093:24096 unknown command 1213584373 [ 407.374443] binder: 24093:24096 ioctl c0306201 20000180 returned -22 [ 407.387840] binder: 24093:24096 unknown command 536871424 [ 407.387850] binder: 24093:24096 ioctl c0306201 20008fd0 returned -22 [ 407.387978] binder: 24093:24096 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 407.387984] binder: 24093:24096 unknown command 1213584373 [ 407.387991] binder: 24093:24096 ioctl c0306201 20000180 returned -22 03:34:47 executing program 6: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000080)='/\x00', &(0x7f0000000140)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000180)=ANY=[]) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="97dc695a7f697461626c653d307847303030303030303088d400000000000000"]) 03:34:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1f, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:34:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x802, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x0, 0x5}, {}], 0x2) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x305}, 0x14}}, 0x0) 03:34:47 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280), 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="2cbbaffa199cdaf3107f4e29181a015dca89e7728c46d9ed6c73530f31f42939c80b09dc0c414a2b829cd731563b62d085d5627f712132c9a52247370fb64170f1a3facd047a712bf0d3c363576984ccf837602fef2ab60d98", 0x59, 0xfffffffffffffff8) recvfrom$inet(r1, &(0x7f0000000300)=""/4096, 0x1000, 0x3, &(0x7f0000001300)={0x2, 0x4e21, @loopback}, 0x10) r3 = request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='\x00', 0xfffffffffffffffd) keyctl$unlink(0x9, r2, r3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}], 0x2217) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000001340)) 03:34:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x202700, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0xffffffd}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) 03:34:47 executing program 5: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket(0x10, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xd7, &(0x7f0000000000), &(0x7f0000000040)=0x4) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control\x00', 0x40, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000000c0)) 03:34:47 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x203, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856813000900070014cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1, 0x0, 0xffffff37, 0x400f}, 0x40) mlockall(0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000100)=0x7) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x2000, 0x0) [ 407.494098] binder: 24102:24104 unknown command 648250733 [ 407.494113] binder: 24102:24104 ioctl c0306201 20008fd0 returned -22 [ 407.557513] binder: 24102:24113 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 407.557521] binder: 24102:24113 unknown command 1213584373 [ 407.557529] binder: 24102:24113 ioctl c0306201 20000180 returned -22 [ 407.659524] EXT4-fs (sda1): Unrecognized mount option "—ÜiZitable=0xG00000000ˆÔ" or missing value 03:34:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) sched_getscheduler(r1) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$UHID_INPUT2(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="960300000320"], 0x6) 03:34:48 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="66643d0afb0a750803fdbc27628e", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1000) poll(&(0x7f00000005c0)=[{r0}], 0x1, 0x0) [ 407.698866] EXT4-fs (sda1): Unrecognized mount option "—ÜiZitable=0xG00000000ˆÔ" or missing value 03:34:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x6, 0xb0b0, 0x8a, 0x7, 0x1, 0x101}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000480)=@ipv4_newrule={0x28, 0x20, 0x20c81a2a7a49444f, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x9) 03:34:48 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.advise\x00') r0 = socket(0x11, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x5, 0x9, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x4, 0x0, 0x0, 0x7, 0x0, 0x100, 0x0, 0x9129, 0x1, 0x101, 0x401, 0xffffffffffffffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='veth1_to_team\x00') dup(0xffffffffffffffff) getcwd(&(0x7f0000000140)=""/21, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) getpgid(r2) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000cd000000acf5fd2d8f2617ac6fdf2fc38a267555f2f630f8ca2fb6af16be0cc088f597e048ec99161a31e9de7ffab25ddbff9ff1324ccce9d9e0efea5e810d4590386c0bfc1c342d06898a582eabff89901f4e0faca16a15bee69b990ccd7a0b287dc9ff5080bfa10da71ae3ac5cd2b5a655a351b80008309fd0b2cf62ff55d969ec269a87fdd8909859d6dc0213ac2c6acab34497c700b80ddf564eb0c406ec55f19111e25efe2c298cf7355c4a761b965e08cae0342cc433ce251ca26d93c17ea72296d5b8f72d56f38a13a9398db614"], &(0x7f0000000340)=0xf1) 03:34:48 executing program 0: r0 = socket(0x11, 0x4000000000080002, 0x0) setpriority(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f00000012c0)}}], 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40040, 0x0) fcntl$setpipe(r1, 0x407, 0x7fffffff) r2 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000100)) [ 407.714332] binder: 24128:24133 Acquire 1 refcount change on invalid ref 0 ret -22 03:34:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000480)=""/185, 0xb9}], 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"766574000000000000000000bd6800", 0x43732e5398416f19}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') write$P9_RLERRORu(r1, &(0x7f0000000540)={0x1c, 0x7, 0x1, {{0xf, "766574000000000000000000bd6800"}}}, 0x1c) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/68) 03:34:48 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000080)="b1a57178037be9686ad4f67c42f7c3d09ad8b5dd3f4fe225a5f7fa5a2012b333af33919d88939e4d563cbad289f0157fd0e5b377a699b95824175155ea53c8", 0xb, 0x800, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') socketpair(0x0, 0x5, 0x7ff, &(0x7f00000000c0)) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) 03:34:48 executing program 1: pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='9p\x00', 0x46a, &(0x7f0000000280)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f0000000140)={0x19980330, r1}, &(0x7f0000000180)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0xc, {{0x2, 0x4e22, @multicast2}}}, 0x88) [ 407.716814] binder: 24128:24133 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 407.779769] binder: 24128:24149 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:34:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3fb44c1b0c63000015"], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e10000000000d8a46c6f00000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef716eb11dafd69e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7e2d84fd23ddf1ceab285385f99091956d6ff8203d76b71ebc185f2cba622a21dc83404fea60"], 0x0, 0x0, &(0x7f0000000100)}) 03:34:48 executing program 0: timerfd_create(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000280)=0xfffffffffffffff8, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'veth0_to_bond\x00', {0x2, 0x4e22, @rand_addr}}) r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x8001, 0x0, 0x0, r2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[]}, 0x1, 0x0, 0x0, 0x14}, 0x20000081) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x3, 0x8}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000680)={'broute\x00', 0x0, 0x3, 0xf1, [], 0x1, &(0x7f0000000540)=[{}], &(0x7f0000000580)=""/241}, &(0x7f0000000700)=0x78) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000180)) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f00000002c0)=@l2={0x1f, 0xfffffffffffffffd, {0x1a35350d, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x2, 0x6}, 0xdcf, 0x5}, 0x80) [ 408.284655] binder: 24102:24113 unknown command 648250733 [ 408.290316] binder: 24102:24113 ioctl c0306201 20008fd0 returned -22 [ 408.298054] binder: 24102:24113 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 408.305490] binder: 24102:24113 unknown command 1213584373 [ 408.311525] binder: 24102:24113 ioctl c0306201 20000180 returned -22 [ 408.337101] binder: 24188:24191 unknown command 458011711 [ 408.342787] binder: 24188:24191 ioctl c0306201 2000dfd0 returned -22 [ 408.353922] binder: 24188:24191 BC_DEAD_BINDER_DONE 6a4895a289000000 not found [ 408.361804] binder: 24188:24191 unknown command 1213584373 [ 408.367685] binder: 24188:24191 ioctl c0306201 20000180 returned -22 [ 408.375883] binder: 24188:24191 unknown command 536871424 [ 408.376589] binder: 24188:24193 unknown command 458011711 [ 408.376597] binder: 24188:24193 ioctl c0306201 2000dfd0 returned -22 [ 408.393592] binder: 24188:24191 ioctl c0306201 20008fd0 returned -22 03:34:48 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x10080, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') dup(r0) execve(&(0x7f0000000840)='./file0\x00', &(0x7f0000000900)=[&(0x7f0000000880)='lo8vboxnet0\x00', &(0x7f00000008c0)='/dev/zero\x00'], &(0x7f00000009c0)=[&(0x7f0000000940)='%.{em1wlan1cpuset]selfproc,\x00', &(0x7f0000000980)='lo8vboxnet0\x00']) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x800009, 0x4, 0x2, 0x1f, r1}) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x9, 0x0, 0x9, 0xffffffffffffffff}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002880)='/dev/hwrng\x00', 0x800, 0x0) splice(0xffffffffffffffff, &(0x7f0000000380), 0xffffffffffffffff, &(0x7f00000003c0), 0x9d, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000002900)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0xe609a32e59765ff8}, 0xc, &(0x7f00000029c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000006c0)=0xffffffff7fffffff, 0x4) accept(0xffffffffffffffff, &(0x7f0000000500)=@l2, &(0x7f0000000580)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 03:34:48 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.advise\x00') r0 = socket(0x11, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x5, 0x9, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x4, 0x0, 0x0, 0x7, 0x0, 0x100, 0x0, 0x9129, 0x1, 0x101, 0x401, 0xffffffffffffffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='veth1_to_team\x00') dup(0xffffffffffffffff) getcwd(&(0x7f0000000140)=""/21, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) getpgid(r2) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000cd000000acf5fd2d8f2617ac6fdf2fc38a267555f2f630f8ca2fb6af16be0cc088f597e048ec99161a31e9de7ffab25ddbff9ff1324ccce9d9e0efea5e810d4590386c0bfc1c342d06898a582eabff89901f4e0faca16a15bee69b990ccd7a0b287dc9ff5080bfa10da71ae3ac5cd2b5a655a351b80008309fd0b2cf62ff55d969ec269a87fdd8909859d6dc0213ac2c6acab34497c700b80ddf564eb0c406ec55f19111e25efe2c298cf7355c4a761b965e08cae0342cc433ce251ca26d93c17ea72296d5b8f72d56f38a13a9398db614"], &(0x7f0000000340)=0xf1) 03:34:48 executing program 6: prctl$setmm(0x23, 0x8, &(0x7f0000011000/0x2000)=nil) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x17, 0x4, 0x0, 0xa, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2c, 0x3500}, @sadb_x_sec_ctx={0x5, 0x18, 0x5, 0xfffffffffffffc00, 0x1f, "5f6c42e34beb56c5933c3d9e42da150ee8da4e44188ddc1ec443ae9b23bb9c"}]}, 0x50}}, 0x40) prctl$setmm(0x23, 0x7, &(0x7f0000012000/0x3000)=nil) ioctl$KDSKBLED(r0, 0x4b65, 0x1) 03:34:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c58bc7cffcfca54fa3e20d9c791a3593a89"], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:34:48 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') prctl$setmm(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000210011009ec70000000000000a0000000000b790f74801f8d5820000f5d8fa94f84d67caf10ffa2f75dddd1d2c7bdf0426e2273864a2c463269b41336da4a688d0fbb3c78f02f36ff0c1ba0ff10c0b3d3e5c528b2f1367a00e8334d044fff19dca380db4155cfb02b22b62ac46d4fcdea3bd232a8a7ec94af0e0d19eb760cbe95e9096b8849616dc7e8f5286babd4c633a99b092"], 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4240001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4001) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x1, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @local}, 0x20, 0xffff, 0x7fffffff, 0x6, 0x9, 0x0, 0x9, 0x0, 0xfcd}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x1000}, 0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x6, 0x880) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x206002, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 03:34:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/netfilter\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0x101, 0x5dd8bd67, 0x9, 'queue0\x00', 0x401}) ioprio_get$pid(0x3, r1) 03:34:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$getreaper(0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$getregs(0xc, r2, 0x54, &(0x7f00000000c0)=""/206) getsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080), &(0x7f0000000040)=0x4) 03:34:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xd0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1063084000000089a295486af5d355485d2f6af7db0850e100000000000000000000000000005eb1fc0df55e9c25ca5bd006f8824b90730cf7cce840c1ae81404ecef769e16e32369d9d40ff10d20edd4bbd0ea0ec4c80861f18ef65211d7de9ec62706073b39b37043c1686b8c9ae8cd3e03c390666125acb39fd275771259e854f95c35349d3856c2c94364fd2a764d73250848ded13913e61086a10fbbb189e665d7a3e7ead84fd23ddf176b71ebc185f2cba622a21dc83404fea602f681f01c0a4b5a6de271a619b97f4f9e00737"], 0x0, 0x0, &(0x7f0000000100)}) 03:34:48 executing program 1: mprotect(&(0x7f0000054000/0x4000)=nil, 0x4000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000000080), &(0x7f0000004000), 0x8401ffffffe) 03:34:48 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x108) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x3, {0x9}}, 0x18) pwrite64(r0, &(0x7f0000000080)="15137295bfa1ba5d77fe57e2ef3d603f8859f033e4ea8ad1e8cb66836d2077594fd41140f8f93c6e3de9c9ec29f6a770e50c539b6a46d5c647c1df6b59092cfb07acd2", 0x43, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getaddr={0x30, 0x16, 0x0, 0x70bd26, 0x25dfdbfe, {0x2, 0x8, 0x2, 0xff, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x500}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x80}]}, 0x30}}, 0x14) mount$9p_xen(&(0x7f0000000340)='\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x1, &(0x7f0000000400)={'trans=xen,', {[{@access_any='access=any'}, {@version_9p2000='version=9p2000'}, {@version_L='version=9p2000.L'}, {@privport='privport'}]}}) fchmodat(r0, &(0x7f0000000440)='./file0\x00', 0x8) getpeername$unix(r0, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) ioctl$TCSBRK(r0, 0x5409, 0x2) write$FUSE_GETXATTR(r0, &(0x7f0000000540)={0x18, 0x6581d4a8f5ab5f8c, 0x4, {0x1ff}}, 0x18) write$selinux_create(r0, &(0x7f0000000580)=@access={'system_u:object_r:devpts_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x401}, 0x42) fgetxattr(r0, &(0x7f0000000600)=@known='security.selinux\x00', &(0x7f0000000640)=""/92, 0x5c) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000700)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x70000040}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x33}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x58}}, 0x40) fcntl$getown(r0, 0x9) write$P9_RCREATE(r0, &(0x7f0000000840)={0x18, 0x73, 0x1, {{0x2, 0x4}, 0x2}}, 0x18) r3 = syz_genetlink_get_family_id$team(&(0x7f00000008c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1ac, r3, 0xa00, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x190, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x6, 0x5, 0x6d, 0x3}, {0xd7, 0x1ff, 0x100, 0x4a}, {0x180000, 0x100000001, 0x3, 0xfffffffffffffc00}, {0x0, 0x9, 0x3, 0x1f}, {0x9, 0x200, 0x3b25, 0x5}, {0xa25, 0x8, 0x4}, {0x40, 0x80000000, 0x0, 0xffffffffffffff22}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff80000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x414b}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x877}}}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x801) write$binfmt_elf32(r0, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x9, 0x1567, 0x8, 0x9, 0x3, 0x3f, 0x1ff, 0x12c, 0x38, 0xe6, 0x3, 0x8, 0x20, 0x1, 0x212b, 0x889}, [{0x5, 0x3, 0x4, 0x9, 0xfffffffffffffffa, 0x1, 0x80000001, 0x1444}, {0x4, 0x206c, 0x3f80000000000, 0x2, 0x6a8, 0x24, 0x381, 0x3}], "6f6e65073dad45a6384d3790d33b97b30f67238957dbdedd5d7329fe32df7230227a2702c121a188fe12e83203b8ffcb1c7a575c63b30495f3a647e4c0c6f016e05213315aa202c398862d7f992a6f3925ee3f8a95be13e465f07827007f794d18329275dd35a8332047d07ec3692bf314b8ecff753fd8efb6f3b94ef3273b410af1d637d75d691f7b1c1ec4f55acb13a150d33dedee56b2a5c9d40a8d8554af7b538d3773ca3b49b299eecf813f9709c9f0716b852115bd878535842c04facbaaacb78662b022d8fe0eb5316675662f6113f0e12efb", [[]]}, 0x24e) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000dc0)={0x33, 0x6, 0x0, {0x1, 0x6, 0xa, 0x0, 'trans=xen,'}}, 0x33) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000e00)={0x51, 0x6165, 0x8, {0x81, 0x1}, {0x5, 0x1}, @rumble={0x5, 0x3}}) recvmsg(r0, &(0x7f0000001340)={&(0x7f0000000e40)=@ipx, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/16, 0x10}, {&(0x7f0000000f00)=""/75, 0x4b}, {&(0x7f0000000f80)=""/88, 0x58}, {&(0x7f0000001000)=""/101, 0x65}, {&(0x7f0000001080)=""/67, 0x43}, {&(0x7f0000001100)=""/31, 0x1f}, {&(0x7f0000001140)=""/126, 0x7e}], 0x7, &(0x7f0000001240)=""/210, 0xd2, 0x2}, 0x40000000) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000001380)=""/149) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001440)='/selinux/enforce\x00', 0x0, 0x0) getsockname$packet(r4, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000014c0)=0x14) execveat(r0, &(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)=[&(0x7f0000001540)='/sbin/dhclient', &(0x7f0000001580)='proc+\\!}\x00'], &(0x7f0000001800)=[&(0x7f0000001600)="286367726f7570706f7369785f61636c5f616363657373656d31b2096c6f00", &(0x7f0000001640)='+#\x00', &(0x7f0000001680)='\x00', &(0x7f00000016c0)='system_u:object_r:devpts_t:s0', &(0x7f0000001700)='eth0\x00', &(0x7f0000001740)='selinux-,.trustedI\x00', &(0x7f0000001780)='trans=xen,', &(0x7f00000017c0)='md5sumuservboxnet0]em1ppp1\x00'], 0x1800) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000001840)={{0x2, 0x4e22}, {0x307, @local}, 0x60, {0x2, 0x4e22, @rand_addr=0x2}, 'yam0\x00'}) openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000019c0)="7e0b72fa67f78c1ce009ab1515e8ed91e0ff1ffd48ec260365be4d895cbfeeb9ae628eec58f81098be619b9cf015a554e210ff43c9862dc390b671f964756de519c80cf9be9e8d8d0ed502c61dfd809dad0ab3ad632cf55cd8a4c31c1028684f1deb966cc88cc31d52091035508bed1812f6b24e07139f97c6f1258b6e1d154c97d044edd9afa97137c512d00cd903c0d9a4c05ca35184135f5694ba33be38ed351bbc9ef808e2115b25362bc78e47c5d4969e81902c2ba82ae43aa27daed4da67b11192b16d18329261f82758e214288202eeeb31d776a8d446caf0e00d7b2a4d807cea5925a66b1454a229b2c0c180423c58c29ddf114a0202f288810889ee") 03:34:48 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'net/ip_vs_stats_percpu\x00'}, {0x20, 'net/ip_vs_stats_percpu\x00'}, {0x20, 'net/ip_vs_stats_percpu\x00'}, {0x20, 'em0}em0vmnet0procselfvboxnet1}!%systemeth0selinux:trusted\'nodevnodev'}, {0x20, '%{GPL\\-vmnet0'}, {0x20, 'net/ip_vs_stats_percpu\x00'}], 0xa, "54e7d692e797f0f77ff4e14875e4f67857c4f54b602cba9b528c0ca54bb7dc7d73b9c331f1dcdc7135e512d5a1ec43119f268b2baa0505b7f0996130a54558884ef9202f8178a286c9465a3068da4e6bd7e4fc031eec6ef0c37fe12e0f4c70b2395fc6fe9edc5520b898cdf9f763da473c3db7dfc9b27df65b7db460123e8e"}, 0x13d) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) 03:34:48 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(r0, &(0x7f00000008c0), 0x0, 0xfffffffffffffffc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={r2, r3, r4}, 0xc) r5 = open(&(0x7f0000000380)='./file0\x00', 0x240000, 0x180) write$selinux_access(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a636f6e1aae20a557e5e91d0d960d736f6c655f6425766963655f743a733020756e636f6e66696e65642030303030303030303030"], 0x46) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x5612, 0x7, 0x19, 0x0, "a04caeac0e5aa40eb75d5a7dea7a4204b2f5f22195f365cad379befe7785d9c29f487b9fb3b6d17794cc151a432c008f7375a302b3bb9625d4b33eb1624ec685", "e441db7501f40018acf0c11f749a595c417fa75e0cc3af3874452c09a243c26e", [0x7]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100040a0}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="78000000000000000300000000000000a99a324fc85ec718a2811d0201230615dfd30e070000000000000100000000000000070049903d4c3dcf0a9761ba53700000000000000700000000000000010000000000000003000000000000007f000000000000000800000000000020df0f00000000000008000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x3, 0x2, 0x700, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x200080c0) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000580)="f798494ae8e0e450025309e90caf551040a52d458d836a735a8a628b1c0982b857b7e77b78a6577890d7a0638a486f1e9b8667addd32195ab2fa7e3fc69c37500d21d6f3c15f827e048ea9be132b6864271bd14cd6361b18cffffe8ed1c8d286b5deef0161626b9321a46b133bf1b1970e78d9cba7029686f4f659c243200017") setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r2, r3, r4}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x181000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r8 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) pread64(r6, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f0000000600)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) creat(&(0x7f0000000700)='./bus\x00', 0xc1) r9 = open(&(0x7f0000000ac0)='./bus\x00', 0x100, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r9, 0x0) ioctl$KDSIGACCEPT(r9, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000000), 0x800000bf) [ 408.538226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 408.552156] binder: 24198:24213 BC_DEAD_BINDER_DONE 6a4895a289000000 not found 03:34:48 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r1) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r2 = dup2(r0, r0) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f00000002c0)={0x54, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) sendmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) 03:34:48 executing program 4: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x0, 0xac3}, 0xf) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000240)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x6, 0x2, 0x1000}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) ptrace$setregs(0xd, r1, 0x6, &(0x7f00000001c0)="0dd7abf14a08c0f4051275c5bb4f7482939317f867267856dde6499f4143ec24543c814d0487bc94d5a7b5b92379") [ 408.552177] binder: 24198:24213 unknown command 1213584373 [ 408.552185] binder: 24198:24213 ioctl c0306201 20000180 returned -22 [ 408.555018] binder: 24198:24213 unknown command 536871424 [ 408.555027] binder: 24198:24213 ioctl c0306201 20008fd0 returned -22 03:34:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000000), 0x800000bf) [ 408.600688] binder: 24208:24237 Acquire 1 refcount change on invalid ref 0 ret -22 [ 408.601661] 9pnet: Could not find request transport: xen 03:34:49 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000006c0)={{0xff, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x0, 'nq\x00', 0x39, 0x1, 0x60}, {@broadcast, 0x4e20, 0x3, 0x0, 0x7, 0x8}}, 0x44) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) write$eventfd(r0, &(0x7f0000000180)=0x5, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'gre0\x00', {0x2, 0x4e24, @rand_addr=0x7}}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000740)="f2fbc8227a6a1d0d6986b7e30e9521a22c8b14f373acb971e6d3fe49084cf3e05be3883f64e9711bd33e10bf244ebe8116d4c168fcddba6a69f8805f88b22f3be962283c327916d47aece725013da2c2938a932895749f074ee216f7109cded957904864f7ab5b4497d304e11b25b08241048792a6047ec5fad0ae87475f0cb1afb7e8d0ed5da7684a249d576c249bea031c786a8ef32a340a074b54813cc35c154c86ea1004b5ae66ced16da7272a1036e2b16bd2db8d1c6578437608739049b04ec0e1b95a023c181775b6f527e22f29f4bbb2bd22068794bf6c", 0xdb, 0x20000000, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getrandom(&(0x7f0000000240)=""/40, 0xfffffffffffffccd, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x5, 0x1e8, [0x0, 0x200005c0, 0x20000808, 0x20000940], 0x0, &(0x7f0000000100), &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x319) 03:34:49 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00050000000000000720bbbb3fff06862d52359bba54f69eea117bd840bb33e1f6f57a68607feb46c97f070800000000480ca05100000000"], 0x38) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x0) [ 408.649684] binder: 24208:24217 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 408.649823] binder: 24208:24217 unknown command 2092718092 [ 408.649831] binder: 24208:24217 ioctl c0306201 2000dfd0 returned -22 [ 408.676690] binder: 24208:24217 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 408.676698] binder: 24208:24217 unknown command 1704546753 03:34:49 executing program 6: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001700)={0x0, @remote, @remote}, &(0x7f0000001740)=0xc) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000001840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)=@newtclass={0x4c, 0x28, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, r1, {0xfff3, 0xffff}, {0xf}, {0xffff, 0x5}}, [@TCA_RATE={0x8, 0x5, {0x4, 0x400}}, @TCA_RATE={0x8, 0x5, {0x0, 0x6}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x10, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0xffffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfef8) fallocate(r0, 0x11, 0x0, 0xfffe) [ 408.676706] binder: 24208:24217 ioctl c0306201 20000040 returned -22 [ 408.676825] binder: 24208:24217 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:34:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x400, 0x0) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @mcast1, 0xc}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) r4 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f460c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) [ 408.697364] 9pnet: Could not find request transport: xen [ 408.927923] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 408.948444] binder: 24277:24279 Acquire 1 refcount change on invalid ref 0 ret -22 03:34:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) fcntl$lock(r1, 0x7, &(0x7f0000000140)) 03:34:49 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f00000016c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(r2, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) read$FUSE(r0, &(0x7f00000006c0), 0x1000) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x12, 0x8, "2bfad2f687cba212f07ba6d0668ff0998c00cb1e50bafb115ef6f1e24a13df4c4a621f1e56012b04a1e912d55f778185a8e05845c8d56bb12bddf287eb406cfb", "d1ba49a35ad9f307a796f71399320208c2a03fce31fb438918eb36aab0272f36", [0x6, 0x8]}) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffa000/0x3000)=nil) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x81, 0x4e23, 0x0, 'ovf\x00', 0x0, 0x0, 0x6b}, 0x2c) dup2(r4, r3) getuid() getgid() mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000004c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000540)='fuseblk\x00', 0x8000, &(0x7f0000000580)=ANY=[@ANYBLOB=',allow_other,\x00']) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x220, 0x4) 03:34:49 executing program 0: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000480)={0x1000, 0x0, 0x4000000000000}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$TIOCNXCL(r2, 0x540d) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x80) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xff01) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) fcntl$setstatus(r3, 0x4, 0x4000) write$selinux_access(r3, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) creat(&(0x7f00000002c0)='./file0\x00', 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="7b0382cabcd54b8bfd9ac1168fe13bca7d43733b7c8813e844571c2c32fcad3e5035cdee9d2b209a81b4defdd5047c14ce19f5bfbf09c7b47cb786049f5f212c104c5d5ce1a89a8b5627807c85e3d307ce4a0e2eade64305457484ab8e929235492b108b80cc22f154ca1b1f31c3148b5206b3c28fe6a6b33066547a93aa1399adcc3d92a9dcd500406adf6aeaab183ad6eabc66a43668f82afcc30ee1530d53a482c41b6744fa015b6b3eb83386d0cd0a48c9fe34cb4e1f1be111db82aa6000abf6481b04be03fbb11c4a3650322e8476c97ff1aa68fb2b0cca999e736aeb628c5e577cc221392dc2cc63218bac4f15093845a499e5173a22fe19dc37fc59644e0fcd116cc99242823475d0e8c4b9f72283bf56ea3b5c5a4fd8f29edeaff3a2782363bc3233daf8"], 0x10e) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, &(0x7f0000000280)=0xc) ptrace$peekuser(0x3, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) 03:34:49 executing program 1: mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r3) ioctl(r2, 0x4000008912, &(0x7f0000000000)) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) r4 = add_key$keyring(&(0x7f0000000840)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40)="aeb97a4dcacf321f1bace476d0fa283350b90d8af7e4b7b477a97cc756485ea00ab45393e33cf5603fce0d594f805ac48a92f7118533b34b39d09d82638a79e2313cb0baed826b9042af571ebe4f4ab74310df95f7073451789d985d8b23d5cac2bbd642f7f3da8a3901c72002d2fd5ee9870f57622b4a04f1ac2e6656ccdf1737f24b4edb848826b7e43da5e021f5979ea35862c96dcc06f226d89caafbe096cb95a406210efe77ae7716ba84ddf266cd6eced093cad4704477e038e3eb66c6dd6642911b46f73ffbf96242ff0109f6ba3936b694b26614a6111eac4f2f41eda32c1c2694c71d7e7c7a8a00ebabd09cb92808", 0xf3, r4) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8}) write$selinux_access(r5, &(0x7f0000000900)=ANY=[@ANYBLOB='sject_r:etc_t:s0 /usr/sbi~/ntpd 000'], 0x23) getpgrp(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001300000500000000e8eb3b0000000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00 \x00\x00\x00\x00\x00'], 0x2}}, 0x20044800) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)) inotify_init1(0x0) [ 408.991138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 409.010663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 03:34:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000000)={&(0x7f0000000800)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) [ 409.040189] binder: 24277:24279 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:34:49 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @local}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'sit0\x00'}) [ 409.096958] binder: 24277:24283 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:34:49 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200200, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) 03:34:49 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000180), 0x0) membarrier(0x5b, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 03:34:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000140)='\'!:vboxnet0\x00', 0xc, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x7, &(0x7f00000003c0)=[{0x80000001, 0xf6f, 0x9, 0x1}, {0x0, 0x7, 0x3, 0x4}, {0x81, 0x8, 0x9, 0x80000000}, {0x39ae7b9f, 0x4, 0x100000001, 0x6}, {0x0, 0x0, 0x4b2, 0x1000}, {0x1, 0xfffffffffffffff9, 0x9, 0x7f}, {0x7f, 0x9, 0x8, 0x6}]}) r1 = creat(&(0x7f0000000100)='.\x00', 0x46) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000240)={0xa96, 0x1, 0x3, 0x0, 0x0, [{r1, 0x0, 0x1ff}, {r0, 0x0, 0x1ff}, {r0, 0x0, 0x5}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100001050000000000000000f0000000c6baae56f4", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) 03:34:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'bond_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000), &(0x7f0000000100)=0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r1}, [@NDA_DST_MAC={0xc, 0x1, @link_local}]}, 0x28}}, 0x0) r3 = getpgrp(0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000200)=@req={0x9, 0x2, 0x9, 0x7fffffff}, 0x10) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x4, 0x10000000, 0x7, r3}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'irlan0\x00', 0x81}) 03:34:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x80000000, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = inotify_add_watch(r2, &(0x7f0000000b40)='./bus\x00', 0x0) inotify_rm_watch(r0, r3) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000140)) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) write$9p(r1, &(0x7f0000000340)="0626fc8e5de5a272d59b81bbcd0459f7162148f8c6c7ea9af500b88d6713736c6c011769b08cd0167fa4326a780ac5f2ea9d01f997d6d3600581f10964b9758176a7abfd248e4ca62310faf872570a3fba6ce75ef00a8d154b8e6bcf549a12cc5f29ac8c8e7f0f8837097000178b2b7c1fd947277218a9440dae42091b1a939b14646543aa440dbe9a5fa0afdba0879948feb9ef15ca0b2b7a02e73c491d22d7ff8eb733d1ed0b77a595a65fb3aa34f52ac6e95c95670ba111bee2f70cd1c7fcd6eec9d53eb99cab5548f814b57e0d8cfff1100a7553fcfb9475d47d7e4f67f30d9aa342cdb34844a981524c506ced526647afb47c05c53c67954f3f5f49f4f94ee96ae07fd8ec8faa14b4040e8c3492c36ec590c6c4f4b8563b1371c51a83d7e52d2967f33622d0daccc3e088fbf5c754efbb23db0362bfdfa8c1ecdd6991d2149ea5fc8801c674722c03418aa5da5279b0a4da0a6890bea1b9898703cc037a9c5f0e939a55ee4bd99b7bd90cf4002e945ada9f96063dd0f83b1356882cb59fbd5f240d1072ce91d2b8a3fe1f3761d79d6460dac3e2e7c81394e256a90f61bbb396a03b020cff35c800ed9cf1c290feb4b45b284bf9fb675f16564b98d2b29e61920efea4d6f4a99aca023bc1169d95544fc6531aa37bf83c25fdc9ac160789543c5e5da0d886a6b63bcd7090151af37b69460197d539084b90aa8a3e765c1b5ad174d6b2568453da295c186b8aff52ce75374e69604835ab1309f818d9ace5d69a66b7eb1497958b8a9a111bfc9f82e9c885ba0f1d7b30a1a1abc6685b5287bdc82528e58f14b87801e76777c9dfad4f9063b12dfd1e2f6d74f348faaf28e178763e02c0acdb65592375578b5cc41a9be558d45a85efe44b9128e2ed7f606c2facc48b2b661dbd742ba68c614e1e9f3dbf58bbe3e4d2d412c3c107b795b8d87e496285690f890bd80e8c55adb34f1b279bf491458f224bc333d04236038ef0276040eaa85a813371cf166ed7c44fd177a9b980174d1a0258dcd41e5654b2b1f9b993709727611557ddd4d86a33af4f870d2c7328ac0301a99e78178eb2ec1a82329d18efa24cdf9ef2ef5e35736b87e2442e0a3dbef79611bc2168e93386d540974a7608060b9d7da427bf772565abd6e6a5dc0ae70f2b0b6008196083f0ac1d8c0a536d576225b2f3eefb3355adb8ce6d7da22dabcc7c4dc74146b16bc22d96ba70e2891a8dc844227901d42f41ec4f3d0605c6b46531a16d943a710f34a947c54c4c0b7d55cab10f72b1dee346b55cebcf9f8f8e26fc65351784f5f321333ee2bce1bdaa58450016054cad91e7328823236cedf9ce2ac562959022b12dec7b362f8fe633dbfbe73f0ddc363632224b0200d7f1e62b7a6f84269f9a8c640c309cb6caf3e6deedbafbdaf455b72b4f16599457537ff075a93a337ee8cbef63e628482e8028e2cc01973a6ad91fb1a0cede5be811eb0aabf6f43e8830e711cd19f043d2e03267916014f8e27f87c8db2506eb641983ff47c37b6dd4d57eaeb9e8354446b4918ec567d9d1982e7a776b16648ea229a760aeb55d7e2c718f71088943432ff8b2fea6a5aadfacd0b1bd90a2ce08da43d24f39dc4d1b91da80141787b6f5f1195d4af0bc3c7eb03711921d71cd7f5c6986aef76c5cd5da0c306a047e8213b42fa4469efe4d9d8e4dd5a171c3a293e9dfdbdac6baf45e00fbd57360a8c725e418c95f284e3ab921ede6cbc9d1d40a8a14d618268c0f21fb5b97a361ce0f8e2b3e0fa39fa5151188eeb82ba1cc89589aafc6baf1b17c0391890e8faa9878dffd67dc8bc8833690e03137e617fedbba8ebea273a600d2d9716d6710d9010ec80343931e7b7b0d62154d7fb88976d3715a20fb34bf6e35334e373239c194b977828c7b9956249854d80884ce36c714a86cf3b8923764e0f05f4b1b94f99eb37d7e447686fea0a5bbb3a0dd17534cb74d81eeef481063c613c9e05787fe28ed4411e14f70ccdd030c92b7402cebfd2c92ffd929895551c555df3327beb0aa7c21edb3ccab61eb5a57082fbae93972fb244160fc2094653f934ffa1002382c34851c036ca41ee834f5322f3cc1c39eafcceb997dfb0095e3752b30218f128e1e2016076aa0c935fec100dea24dff4d9daf1dba650c09d5bc9a067b10eb6a83886a1544070bbb07b7c9b023714018cdbce5ccf73506502b19c6b2915e23624d2d6aa0c1999e5ae50dae10a8a08a5cdc01e6bae96e0d8d00a1acfca1b18ce9262d9e6441fee9efbb4829890663814f1b2810ca027cf1429157163da3f8e7b45f10432994d58494ce9f4aca7ffdbc63d7fa9c8e6a4f217cf3df2eec9ab1ab3044908a2eb35681a9255ba99350a932ac0413525e95e09633484bd8e21066fa14204173479168eff12e225e8359ab93d414391f4a94147b61be6987c998a1c2727cb52b1cf35fa3c53e45ec6400b7a0a506350fc8ef52a5816c04c6d0b24453497993a1e649e36eb83c1394ac3cc33f01e00d7a8a9cb6610c250bd9cd3048a7cb816152dfc101030a56724be8db1d82af0c17714af11fcec6af65b7c58697d1e9e0f2a1fd96565e558ae43ab3995c28f53658b87e76dac02a6a070809a84b01596b6a2d25c98d0eb2a311299bb5cd5259727ec74d2afbf09a6bbedab297960e1ac8fa2677a68d457579223847748a0fe68f199e01cc087c8466a810b83290d6bd72a0fde02288cb9c8956f47b6c523b2204b5ebaa2ae716efde58a9e0c5896bc7667b96dfda2e37bbcb9c23e166df9cc229c9ad66ff23a053d21e82aa9feea4328891b863c01a131c07791c27a6aff50f2aca37190c3c6f068c520fcdbb87b5c8934b46f0175f1f838479967d10df2f5175", 0x7f1) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000008000080000f2aad80001000000000000b8727e5a5f67a804004e03a7169534bd54e9121a54d8d43800000000fb9e02bf40e2ce65d6cea82b56"], 0x2f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x20000, 0x0) 03:34:49 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x7, 0x2, {0xffffffffffffffff, 0x0, 0xfcab, 0x0, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000080)) [ 409.515541] netlink: 40 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x40200031, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000080)) timer_create(0x3, &(0x7f0000000400)={0x0, 0x4}, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 03:34:49 executing program 6: socketpair$unix(0x1, 0xf, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) uname(&(0x7f00000001c0)=""/242) 03:34:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000001, 0x400004) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x5, 0x7, 0x30c}) [ 409.557133] netlink: 40 bytes leftover after parsing attributes in process `syz-executor4'. [ 409.581528] FAT-fs (loop1): error, invalid access to FAT (entry 0x000001c5) [ 409.598344] FAT-fs (loop1): Filesystem has been set read-only [ 409.616481] FAT-fs (loop1): error, invalid access to FAT (entry 0x000001c5) [ 409.637695] FAT-fs (loop1): error, invalid access to FAT (entry 0x000001c5) [ 409.645685] FAT-fs (loop1): error, invalid access to FAT (entry 0x000001c5) 03:34:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x2, 0x4a00) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000f9fc9972b7a23b410a4637ca6d2e6b25e03063b8da83e9f8ed95c6c20763b5896ad424cb18dfed4f9efb51e9e0988c668fd73270e639a915ceacb107afcf740bfff59d713a5ab90f2cff0a9b260094287fbe28337e5f384840c4bf2ea609bc31a9b5dc0f832223243db82f8bdc1eda4aa95edbbf4cfa3f5039ac535108f25cf41179e4db863215352e99fd2f2357e8043dedd1b545a1dc65818d7de9816d63e82f48d6b57ab66e9cafea40f7cf9c99dbda46b8b60d281d9a0c3b8cef1822d0a382789afb7d40ba1bade2"], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000"], 0x0, 0x0, &(0x7f0000000100)}) 03:34:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = socket(0x200000000000011, 0x4000000000080003, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000001080)=""/224, 0xfffffcda) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000240)={0x1, 0x4, 0x9, 0x86, r3}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0xfffffbffffffffff, 0x2) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000480)=@ipx, 0x80, &(0x7f0000000680)=[{&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/172, 0xac}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000500)=""/45, 0x2d}], 0x5, &(0x7f0000000b80)=""/121, 0x79}, 0x100) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)="72656164730000000000000000d49b", 0x2, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)=ANY=[], 0x1b5}}, 0x40040) write$selinux_user(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="7379fd6973781a2de6f71dbbb873746518cf6d5f753a6f62ed6563745f723a6d6f756e749c74464b69d727983020d203210b20002842d7aa1a32c54d892792b0fc89b5"], 0x2e) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) readv(r1, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/49, 0x31}, {&(0x7f0000000c00)=""/20, 0x14}, {&(0x7f0000000c40)=""/223, 0xdf}], 0x3) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in=@broadcast, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) 03:34:50 executing program 4: setrlimit(0x2, &(0x7f0000e63ff0)) prctl$setmm(0x23, 0x7, &(0x7f0000016000/0x3000)=nil) [ 409.694863] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 409.702179] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) 03:34:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300030cf50af3a213bb000000000000000000000002000900020000000000000000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000060200000000030004000000000002000000e0000001000000000000000092d63d06af84ab008f81d97c5980a471abb74ca1217ce0d5edae630251699007e63b4afd6cd6cab8884a089c22f9c367655f899d0e92fbfea4a29e85330ab513c92d45f572f9e04ebb"], 0x60}}, 0x0) 03:34:50 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flock(r0, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) fcntl$setlease(r1, 0x400, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000100), 0x4) 03:34:50 executing program 0: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000480)={0x1000, 0x0, 0x4000000000000}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$TIOCNXCL(r2, 0x540d) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x80) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xff01) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) fcntl$setstatus(r3, 0x4, 0x4000) write$selinux_access(r3, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) creat(&(0x7f00000002c0)='./file0\x00', 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10e) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, &(0x7f0000000280)=0xc) ptrace$peekuser(0x3, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) 03:34:50 executing program 5: mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000600)='cgroup2\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x200, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000003200000402000000fddbdf250a00000008000300e8e68b2fc776ef4b2e0b33e97eb57fd1c2a757253a15f3de2eeaaeb186e74b912a5b15e1d6c78cf2679d1e9546bacbaeb9806befbef7f0a55706d547a85ad99e3d72cb55c027a9d612e59a01f620bb4db8e277329338a2aae8b590c845c6c8c564a34cc867f0922c5c520530d40b60bdfc9468487f39fabf28c43a0073d1b78d5bc295bf298e377c83fe33c68e319c7970fd3798ffd4239df0e020c6a674efd52b90493238555cd0e9638f2f4f560a07f867714b47374015fc04fd9ac41a8cfc17619ec5010ff5a622", @ANYRES32=r1, @ANYBLOB="ac1ba569d41e5d416e8cbfa64584db2ed2700eba06e0c6f133ceca2ae5e5ca357fa883bf995ac09b904f70289e5c944fa07c348ff3c6b4c1e5978b172f74c994a0ed665a45578b19bdd9a1d03e548c9e7b94e0e9c0be71f9c2b8404963f64469faf73ad27c9a5ea51a2cec8648004185edd39a0e67b60000"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) readlink(&(0x7f0000000240)='./file0//ile0\x00', &(0x7f0000000280)=""/95, 0x5f) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) flistxattr(r0, &(0x7f0000000340)=""/251, 0xffffffffffffff99) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvmmsg(r1, &(0x7f00000001c0), 0x315, 0xea225aec34b1dd0e, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000100)=0x6, 0x4) 03:34:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001740)=0x9) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000240)=""/8, 0x8}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x19, &(0x7f0000001800)="db1050c922", 0xffffffffffffff11) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000400)='ubifs\x00', 0x1000000001003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(r3, &(0x7f00000019c0)='net/snmp\x00') sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r6 = getegid() mkdir(&(0x7f00000016c0)='./file0\x00', 0x20) fchown(r5, 0x0, r6) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) lstat(&(0x7f00000017c0)='./file1\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f00000001c0)='9p\x00', 0x80, &(0x7f0000001a00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, 'net/snmp\x00'}}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@access_client='access=client'}, {@access_uid={'access', 0x3d, r7}}, {@cache_none='cache=none'}]}}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000001780)='./file0/file1\x00', &(0x7f0000001700)='./file0\x00') syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') [ 409.903264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=24381 comm=syz-executor4 [ 409.960073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=24381 comm=syz-executor4 03:34:50 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r0, 0x2}, {r0, 0x100}, {r0, 0x4000}, {r0, 0x80}, {r0, 0x100}, {r0, 0x4be}], 0x6, 0x2) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0xd, 0x2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000180)={0x0, 0x80000001, 0x0, &(0x7f0000000900)}) sync_file_range(0xffffffffffffffff, 0x8, 0x0, 0x0) 03:34:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:34:50 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000480)=""/4) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000500)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) faccessat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0xa4, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) membarrier(0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d42, 0x100000000, 0x9}) ioctl$RTC_PIE_OFF(r1, 0x7006) statfs(&(0x7f00000003c0)='./bus\x00', &(0x7f00000007c0)=""/4096) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000180)) 03:34:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x408001000000002c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xfffffecd) connect$inet6(r0, &(0x7f00000000c0), 0x1c) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="d54cd439c82c4323465b135143f4", 0x376}], 0x1, &(0x7f0000000200), 0xfef4, 0x4}, 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)=':!\x00', 0xfffffffffffffff9) keyctl$clear(0x7, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x40400, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) 03:34:50 executing program 6: r0 = open(&(0x7f00000004c0)='./file0\x00', 0x20000, 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c525dd5", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xffffffffffffff01) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000380)=0x54) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000580)={0x5}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000002c0)) r5 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000180)='./file0\x00', 0x0) dup2(r5, r2) 03:34:50 executing program 1: r0 = socket$inet(0x10, 0x3, 0x10008) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040a07041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:34:50 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = epoll_create(0x6) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000340)="5ccb344cef576a94dd3501b3f2bc02dc9c0e31048b6e3864af68006cfe2a8f3e262bbf4b4d15") accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x0) sendfile(r1, r5, &(0x7f0000000000), 0x100000080000000) 03:34:50 executing program 5: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.ima\x00', &(0x7f0000000380)="002fb4e5878d1bbd7a33882e0147df80e95b1e3b80c03149893834fd8a776a0fcb31037ec38d83a720b085a51275653f57770dd38336c7b5c6e9087388f5b68b363032ecb8166958f83e2d0979", 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) 03:34:50 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x184) writev(r0, &(0x7f0000000500)=[{&(0x7f00000003c0)="a3563f8b9c4e4e4f4f3c544c291dd12140e2d2a43b59e6a5300476a510d289c89386aa23de1cbfa98e08ede3e0f6d907133db146fb4d3d8bf147e148cbe4876416455b955fe5b45589c76637c7921c7c330da83b2812957d2b5e550f167c80f9e20dc6e47e9f304a168463d5603ffaafd42b46f9dec61f08a7c5f916253f636b0afd09853461f5c97e7a852ed01e6fa33abb069ef7", 0x95}], 0x1) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getdents(r0, &(0x7f0000000540)=""/24, 0x18) ioctl$LOOP_CLR_FD(r1, 0x4c01) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0xc) sendto$packet(r0, &(0x7f00000001c0)="68e90fcb7fe7dd09b91b8f8f5b42305207c3ae613e4a910a1c05e67daaac71346e525304d771e3614f46da4d97fc747a7543681ce5db3830995c1bc4abada7801ece0381507ec9fed3c1ac502c13696969270cd72e9499", 0x57, 0x20000880, &(0x7f00000002c0)={0x11, 0x7, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) socket$netlink(0x10, 0x3, 0x1f) r4 = getpgrp(0xffffffffffffffff) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x7, r4}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000340)={@loopback}, 0xc) [ 410.374202] binder: 24401:24404 Acquire 1 refcount change on invalid ref 0 ret -22 03:34:50 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r0 = inotify_init() r1 = fcntl$dupfd(r0, 0x0, r0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f000003a000)='./control\x00', 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000140)) mkdir(&(0x7f0000000080)='./control\x00', 0x0) inotify_rm_watch(r0, r2) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) ioctl$VT_DISALLOCATE(r1, 0x5608) timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) [ 410.453515] device lo entered promiscuous mode [ 410.454255] binder: 24401:24404 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 410.524044] binder: 24401:24422 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 410.532246] device lo left promiscuous mode [ 410.541249] binder: 24401:24422 unknown command 1704546753 03:34:50 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400000, 0x0) getgroups(0x1, &(0x7f00000000c0)=[0xee01]) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002e0007031dfffd946fa2830020200a000900000006000000000000000400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 410.569594] binder: 24401:24422 ioctl c0306201 20000040 returned -22 [ 410.581505] binder: 24401:24432 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:34:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x8000) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000000400), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000300)) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x80) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xff01) fcntl$setstatus(r3, 0x4, 0x2000) write$selinux_access(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f09000000635f743a7330202f7573722f73626901010000706420303030303030303030303030303030303030303000"], 0xffffffd9) creat(&(0x7f00000002c0)='./file0\x00', 0x7d) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="619fb17934b86908de005083cc6d48e345dee7aad39ced304bbf22a09c23c42ebb649faf0dd9ca00bdeda7cf3cd6d78acb1a4ad252d5090ce0c5a3836f8ffa4b114022e0605236620c5180743e1f076560e2a0165005150a3b6c4fe2452e558efadca311baa1eb3a49dd656bd09868228955f585476dfb8b9514d8fed96ab207fb3def99679ca8effae41bc6e14cf16f2e73"], 0x92) ptrace$peekuser(0x3, 0x0, 0x0) 03:34:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x4, 0x0, 0xffffffffffffffff, "1bb7670182978f0300000000000004bf764095d43a5094f4b23c1c29b51dda91d91e08a14591eacd580082f27dabdcdbeae7f5d8e8f9706468579ae10010a75b00000500"}, 0xd8) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x401) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000006c0)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000700)={@remote}, &(0x7f0000000740)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001600)={{{@in=@dev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000340)=0x1a1e02898d991b07) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@remote, @in=@dev}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000a00), &(0x7f0000000a40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000bc0)=0xe8) recvmsg(r1, &(0x7f00000010c0)={&(0x7f0000000c80)=@ll, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d40)=""/205, 0xcd}, {&(0x7f0000000e40)=""/242, 0xf2}, {&(0x7f0000000f40)=""/245, 0xf5}], 0x3, &(0x7f0000001080)=""/11, 0xb}, 0x10000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001400)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="68019c3db3b9e8158f05507ee95c4f8f37d0a2b67b81d9b8d01f63084840a11677f321566e8879401f9df0ba1da3af2b9d990cee78eca58c69ef95304870e1152691429c049d9f02bb03940fb3b682feb9e3dd946e65032a290b", @ANYBLOB="e80102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000400)) r6 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000018c0)="a3be8ede202032c179a0ba7889a4a4316d9e85d76b6ab4168f24f28e08a5673e673f1335ed5a7f3dc0912aa7ffd1c8e1adbb29caa06fef8c5eaac49567fd3a35124ce9772c263748a0cbca9fe1a2ed13e5f146ffc298462316ef99d7d70aa8d849e8650193910b3d0d06d5b1618a0973eee186e91b6ef5d0bbfbe78877a82a", 0x7f, 0xfffffffffffffffd) keyctl$invalidate(0x15, r6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000180)=0xffffffffffffffff, 0xfffffffffffffdc5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0x4) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001940)=""/4096) write$sndseq(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x1000, 0x2, @tick, {}, {}, @connect}], 0x30) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f00000003c0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0xfff, &(0x7f0000000280)=""/97) getsockname(0xffffffffffffffff, &(0x7f0000000780)=@ipx, &(0x7f0000000640)) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000001140)=ANY=[@ANYBLOB="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"]) 03:34:51 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0xa) futex(&(0x7f0000000040), 0x89, 0x40000, &(0x7f0000000000), &(0x7f0000000180), 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) 03:34:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000000300)='./file0\x00', 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000000c0), 0x4) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') timer_delete(0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x101) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)="63707526352122000000060000039c01000000000000000a1c60666f8dcc6d5c76fd2e9e09626b31deea1b0d3b81b62cd5b4223726b5797482fb1d83e6f82e2d6d0af3b128e9604401695c8d6c866c68a8fc80de2c4b099a06ef2b72590cf82c59249a74f41af3d61afdd00427799b7ce4b70845ed9780731957b75bf0253e4d4df598be5e3d7121a60f70013200bbbe9d7235af657010520b26afa8247f3756ed4c4b34cf9040d5540acaca865fc1ce8ded62538de97482f4317a7772e66f000400000000000091498dfde4bb73bf0a004b9ee55ba00a0f") lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) 03:34:51 executing program 3: r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000340)={{0x2c, @rand_addr=0x10000, 0x4e24, 0x3, 'lblcr\x00', 0x24, 0x81, 0x80}, {@rand_addr=0x3, 0x4e24, 0x1, 0x8000, 0xfffffffffffffffe, 0x4}}, 0x44) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ef58a977b447df620ccb76000000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x400040, 0x0) [ 411.193353] binder: 24472:24473 Acquire 1 refcount change on invalid ref 0 ret -22 03:34:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'team_slave_1\x00'}, 0x18) [ 411.265260] binder: 24472:24478 unknown command 2007587055 [ 411.288824] binder: 24472:24478 ioctl c0306201 20008fd0 returned -22 03:34:51 executing program 6: r0 = open(&(0x7f00000004c0)='./file0\x00', 0x20000, 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c525dd5", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xffffffffffffff01) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000380)=0x54) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000580)={0x5}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000002c0)) r5 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000180)='./file0\x00', 0x0) dup2(r5, r2) 03:34:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000008912, &(0x7f0000000100)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x7, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r2 = socket$inet6(0xa, 0x807, 0x1) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, &(0x7f00000007c0), 0xfd06, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x50024de8}}, 0x18) 03:34:51 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x184) writev(r0, &(0x7f0000000500)=[{&(0x7f00000003c0)="a3563f8b9c4e4e4f4f3c544c291dd12140e2d2a43b59e6a5300476a510d289c89386aa23de1cbfa98e08ede3e0f6d907133db146fb4d3d8bf147e148cbe4876416455b955fe5b45589c76637c7921c7c330da83b2812957d2b5e550f167c80f9e20dc6e47e9f304a168463d5603ffaafd42b46f9dec61f08a7c5f916253f636b0afd09853461f5c97e7a852ed01e6fa33abb069ef7", 0x95}], 0x1) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getdents(r0, &(0x7f0000000540)=""/24, 0x18) ioctl$LOOP_CLR_FD(r1, 0x4c01) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0xc) sendto$packet(r0, &(0x7f00000001c0)="68e90fcb7fe7dd09b91b8f8f5b42305207c3ae613e4a910a1c05e67daaac71346e525304d771e3614f46da4d97fc747a7543681ce5db3830995c1bc4abada7801ece0381507ec9fed3c1ac502c13696969270cd72e9499", 0x57, 0x20000880, &(0x7f00000002c0)={0x11, 0x7, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) socket$netlink(0x10, 0x3, 0x1f) r4 = getpgrp(0xffffffffffffffff) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x7, r4}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000340)={@loopback}, 0xc) [ 411.355678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 411.370503] device lo entered promiscuous mode [ 411.387315] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 0, id = 0 03:34:51 executing program 5: r0 = socket$inet6(0xa, 0x7, 0x10001) sendmsg(r0, &(0x7f0000001b40)={&(0x7f0000000200)=@generic={0x1b, "48f78a2e559fb5ca3408faee63853e737ba0295e3fb952921d1803abc38f965b35b5ade1e61c169994790232ec9318660d78b71e6e0b42735d99ade76c9cc4845756ce1a79607cd7b308c9aad87a75e41968be784d0bea3491d4d700cd6e24f68fe0d816f5220abab9b9b84d0b609879f2ea69f675ba4110932f4019d2bd"}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="64bb0184c8068bb6abfbadc422dc8cd93f38cc7562ef65728a6a72eb4a15350510ee81550b393eef0794f2df139b58930846e6cc4e79d5f79b458616cb32fa947f3ce8f5e596c223e611807fcdc362b25176a99b3a8ccd6e8480eb7b10a4490b5997ce86353764f196589e3339a0c037a12f6a7b222292b10f92d6bbd2b6f2ba088d8b6f169d2cdbeb7a70efd40a345e1e69b26bf8fc61feabad5a6989127045d327b9bc2cfb0a22851a9fe876497e", 0xaf}, {&(0x7f0000000500)="bbfd60d0786528cb4aa5e96714f11ede981a27b64ce389d48cce3edb243ec577f3bed596042b0350a1d69850671a70825854a8957bcc4ab8651a9dd20bc4f84be46c26a8d98db9729c95e17ac69ba31bf5ce99c8c1a2eadd10cb96a92ebabff776099775a43f0ed6aed64483c2e8e17e96d8056ad992b8d2e8a3405e57ed373517950984ddc6a704662547586bb1d86a292d8d92c965040394c923c207a805f1f3487da4f02db9647bdc84ee5707cb3036f224fea3c3050c652e75f41eeea70284ce1422", 0xc4}, {&(0x7f0000000600)="63a75eb4e90e067ec59a470198c94681301d9509c2b56a4d025158a28f865e3b0440e43e208e73224ccbdb9dd67305500d4fd8580abf8b101171c2e55a26b21a0c0678b702cc9ff68f66daa096a1e93b4940d1a80c269e1dad9a67ad80cc89073165261cb870a46d354fa5", 0x6b}, {&(0x7f0000000680)="8a613834fd3f055bd7c4e3ba9ae1970dfb2899e44d6328aa332d417aa62dca883d426d06bba58928f9e1d4145b3a64dadb3b1f3b97c57d675b2e86108e12ef6a134c5847d8818751b968dc51a0f7e4e3f09f6a6790d3b6116454e7cd104c", 0x5e}, {&(0x7f0000000700)="133e977f60517286dfd25d9c42619fe8cfa25c95451d668682f9b70dc1f277118430a7d9b41140fe607b314603fdac551464154d6f7e51798a2924fe9583d9d94e611973f79a3ec8846699860c80144f129e3d1d75a4abd5f4affecc3e3a4d872548822116c0630be3f02673c37577d8634074d58d3a5369ae099769a83f491a928aa4b164a4acf1a38cd798bed156c3b8339a4adb168c7ac31859253a26d6c41ef964f3acd516f0c2a5028b9f0110425aeb5fe4e158a88e", 0xb8}], 0x5, &(0x7f0000000840)=[{0x1010, 0x118, 0x80000000, "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"}, {0x110, 0xff, 0x1, "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"}, {0xc0, 0x107, 0x20, "d375e1d66a46576633d7ee71fd8af23a47b13dccc4c2d1e914175af63fc8d3672bc68ec647f03b1cc431249b646d60e00d052b8797f7b8d51578d4d8f63b4cf349f2700cab01ba93bf5eacb5364ca61f227fc500ffb76ff6917cb072f30f7f38732b82031a15d5cbaa3ba24a3e7df80488c96476e6d97f7ab8a23ce763d16618f0dd87e3c795a3f21d008458c2183fae6349c1f9991d4de386aebb1eccdba86af78bc84638379c7cfca0c7ece00a51"}, {0xe8, 0x88, 0x73d3, "f5d0dcab1ff21c7e9f063f74232cd47f5c61520f6ae39f998f7a4670377974ffeb7612b385dbc6c7a7493749516ff7fa9610c98dad6f4aa3d9bdd5c3071ed094f5758c8f93207052bc0cab0917f5d0b905bdf91a0b591609a5ab8dcc683e48ac6c44b4e85ef500ea67b32a5f720e4a1d0a368cfd0cc8c1baa8d507e74f8eb214e2b44512ac2c08f3c4fb3c261afcb0cea9d61761687051951ed3bcb4ffbac087743f229e0f2ae9adf3bd8dd654a13ac8cbff36ce161ebfd77f76995e91851e837da434cfc61c499a658375c0fb4fbf6304fa0f263f5f"}], 0x12c8, 0x8844}, 0x4000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40110, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000180)={0x48, ""/72}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe7, &(0x7f0000000280)=""/231}, &(0x7f00000000c0), &(0x7f0000000100)=""/77, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 03:34:51 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 411.412200] binder: 24472:24473 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 411.412207] binder: 24472:24473 unknown command 1704546753 03:34:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000000080), &(0x7f00000011c0), &(0x7f0000000280)) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000017c0)=[{&(0x7f00000001c0)="0e9bce6e53eaaf60b530eae933a291256fe4f3bf8f7e011b627bae6f4fec170a19ec6fd297617a62abdf400f9307c47338b75db7ffdf439c78f92480d53beb70fbfd3b6b13df80b52f0c7e", 0x4b}], 0x100000, &(0x7f00000018c0)) 03:34:51 executing program 5: removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) fstat(r0, &(0x7f0000000740)) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@can, &(0x7f0000000300)=0x80) connect$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2000080015, r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000000000000010000006d000000030000000000000007000000000000000000000007000000"], 0x28) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0x4}, 0x68) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) [ 411.412216] binder: 24472:24473 ioctl c0306201 20000040 returned -22 [ 411.412321] binder: 24472:24473 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:34:51 executing program 2: r0 = socket$packet(0x11, 0x1002, 0x300) mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x0, 0x800000000011011, r0, 0x2000000) 03:34:51 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x63}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000040)=0x1, 0x31f) recvmsg(r3, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x10, &(0x7f00002e6f80), 0x0, &(0x7f0000878000)}, 0x0) 03:34:51 executing program 4: r0 = memfd_create(&(0x7f0000000300)="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", 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000080)="02000000b2de30925a1d964243791761ef9e39fb6ca87aac88e2eca883369ed56870d13d9b4ead92a681770568e16fd47240f2", 0x33, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000)) 03:34:51 executing program 7: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x8200) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000480)={0xffffffffffffff08}, 0x28) socketpair$unix(0x1, 0x23, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) 03:34:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FICLONE(r0, 0x40049409, r0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 03:34:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0xa2) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x400400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x14, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000140)=0x1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000180)=0x1000) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @remote}}, 0x7, 0x81, 0xffff, "5fb9e497f2c6639002111b200b36203b12b0c27c09e0dca51ee8ce424227c9918b609b40b4728c4b07618c92238e12f47684d6d0ae736107ab8764256c909a798b267257ec0445f5c6754960fc67872c"}, 0xd8) 03:34:52 executing program 5: clock_settime(0x3, &(0x7f0000000180)={0x0, 0x989680}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x800) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001780)=""/4096) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000540)) getrandom(&(0x7f0000001740)=""/40, 0x28, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000100)={0x2, 0x0, 0x20, 0x400, 0x5}) setfsuid(0x0) sched_rr_get_interval(0x0, &(0x7f0000000500)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000000c0)="4f95e0a199d43fa4d80c1d544e", 0xd) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000480)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000200)="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", 0xfa) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 411.668144] device lo left promiscuous mode [ 411.723807] get_file_caps: get_vfs_caps_from_disk returned -22 for ./file0 [ 411.734450] get_file_caps: get_vfs_caps_from_disk returned -22 for ./file0 03:34:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0x2, 0x7, 0xffff) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:34:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8913, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) dup3(r1, r0, 0x80000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffffffffffff9, 0x1, 0x6, 0x2, 0x758}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000100), 0x4) close(r3) r4 = dup3(r1, r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0x0, @local, 0x8}, {0xa, 0x4e20, 0x156c, @mcast2, 0xfffffffffffffff9}, 0x3, [0x3, 0x9, 0x91, 0x6, 0x3, 0xffffffffffffffe1, 0x9c22, 0x29b]}, 0x5c) 03:34:52 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f00000001c0)=',') recvmmsg(0xffffffffffffff9c, &(0x7f0000001dc0)=[{{&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/138, 0x8a}], 0x7, &(0x7f00000005c0)=""/78, 0x4e, 0x81}, 0x65}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)=""/39, 0x27}], 0x1, &(0x7f00000006c0)=""/163, 0xa3, 0x4}, 0x7d6}, {{&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/110, 0x6e}, {&(0x7f00000008c0)=""/125, 0x7d}, {&(0x7f0000000940)=""/45, 0x2d}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5, &(0x7f0000001a00)=""/252, 0xfc, 0x100000001}, 0x80000000}, {{&(0x7f0000001b00)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b80)=""/51, 0x33}], 0x1, 0x0, 0x0, 0x80}, 0x1ff}, {{&(0x7f0000001c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/239, 0xef}], 0x1}, 0x10001}], 0x5, 0x40, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001f00)={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0xed6}, {0xa, 0x4e24, 0xfffffffffffffffd, @empty, 0x7}, 0x1023f6ad, [0x80, 0x9, 0x5, 0x3f, 0xfffffffffffffff8, 0x4, 0x0, 0x65]}, 0x5c) 03:34:52 executing program 7: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000140)=""/42, 0xfffffffffffffdc1, 0x1, &(0x7f0000000180)={0x2, 0x800000000004e23, @loopback}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f00000000c0), &(0x7f0000000000)=0x319) unlink(&(0x7f0000000240)='./file0\x00') 03:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006800)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000011000308000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140003007663616e300000000000000000000000"], 0x34}}, 0x0) 03:34:52 executing program 1: r0 = epoll_create1(0x0) writev(r0, &(0x7f0000000240), 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x8, {0x9, 0x1, 0x3, 0x1, 0xfffffffffffffffb, 0xceb4}}) fadvise64(r1, 0x0, 0x0, 0x0) getgid() ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x7, 0x5, 0x7, 0x8, 0x1, 0x80000000}) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x6, 0x315c7db2, 0x2, 0x1, 0x1, 0x1000}) 03:34:52 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x208901, 0x100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000300), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x0, 0x70bd30, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="2179cd7af6eef98d706026e9b035e46432204c5e037e17a29431767b4eb3c7ab650a1eb14fc7950031ce761dbe250ad62b220e4f1047203816157d5a04794406a90d5732a7ba682bf28494fef1ff280c8a257ea790143c706bb3b102a48af3a64474a0edc6ca6cd70b293afe81828692da7e96987f62de44000ffa823bd37ba34ef9aecc4c20abd2d922f883512237217e119e9705b5a164278c6072620a38aaf2a4f2a017cf6389a2cb98", 0xab) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0xdb98, 0x1, 0x5, 0x8}, 0x14) r4 = getuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@local, @in=@remote, 0x4e23, 0x2, 0x4e23, 0x1ff, 0x2, 0x20, 0x80, 0x2f, 0x0, r4}, {0x3e6, 0x6, 0x9b, 0x3ff, 0x9, 0x3, 0x3ff, 0x100}, {0x3b8, 0x9, 0xf3f8, 0x10001}, 0x5, 0x0, 0x2, 0x1, 0x3}, {{@in6=@remote, 0x4d2, 0xff}, 0xa, @in=@loopback, 0x3503, 0x0, 0x2, 0x7, 0x2, 0x9, 0x869}}, 0xe8) 03:34:52 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8001, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x4}}, 0x30) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000080)=0xe8) quotactl(0x2, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000280)="a813b86c058b1399ade0e3f15223df419bfac3ffba35b3221a9661f29d108f323403ad672cd4976738bbf0b6899b214b4e3df5dac104d686c74e27f57ecde8f162de3289dbdc7d66576f0ed8d2512c7303de") 03:34:52 executing program 7: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="8d3d7cd5097a834cb79c599ddf6a60db6341dc407757eceffe0a42914e7219ed1efd8e0959cb8fed36a13abf45309c3e530992f3543f676ce5ccb155d341bc3e49c551957ded6de9f60ffd251fc5ab0d1076e612379ce3c3f44371ea371afd145d9dcf3738c4cdd0ee83ffc36959ae35abb429a9a4ad26eb943c3f8cc556c0fcd5a9a09757772faa1a941826dfc4706f83762027e87264011fc1ca620a3bad5736980e6e20586dfd11f90ca3bb743a5e5a675c678e9d20c71307064590185277103391b78d9711bc54975f7f9f81e9", 0xcf, 0x100000000}, {&(0x7f0000000440)="21ce01fb7843ce180c664aeef0cf60e4ca4b6e89cb4eb9aac98725a55a70616eedd2808cfa19164ee74dd66c8f17af8961b56d7d53c2b7693d4d227a1778b4509d29ca35e13eb3b63f67519cf6aa6d9ad3d3cf86f9b2b3d748e52c2c355bc7ed7e515d36047cc65be58e135be51180c08a542c8931b6711b4fc5c63336ce5287e495f96195b38c74cdba3d79a697ace75fef23df52abd661e975c0fb74b8939c1e07c61f4403cb233c8a106a42c1a26521da751aa268b0e98f6083f8c2b483d49a9d169ba16359a7b4277fdc019790e9d784704dd049a87c6ebfac7618bac8307263e474d32f53", 0xe7, 0x6}, {&(0x7f0000000540)="60d34d5fbb3acde3f14fae47cb8b96401ec436e375059f69e48ab24996b32f091cd6840b6a62600ed2150b208a3ffcd765ac346220cbef3853a2435cf4537939a17e82199805acef5ee615f5534d81db458ae2aef1e84faa70215c257c305f10e4eb62ac40bc24e6ebb50c82ad4c235fff3f0053014d66dd5884bba72557e6f9faa602598955dbc260bb3bed81156da4d837cf3f71be35eac05a40a88c419c3cb0519e3f81ef9741ff1467d70f967ef0fd839ce56931b52ec5c4c480e604ca543f4781d3c0418564759f0977451c03bf82290f4aee8bcbeee324ef3355b21875af216ccaa99b3cba670e66b72b0e92149d7a54dd", 0xf4, 0x4}], 0x0, &(0x7f0000000640)={[{@dots='dots'}, {@fat=@nocase='nocase'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@dots='dots'}, {@fat=@check_normal='check=normal'}]}) unshare(0x28020400) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20002, 0x0) getpid() getsockname$netlink(r1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) 03:34:52 executing program 4: r0 = socket(0x20000000000000a, 0x2, 0x0) accept(r0, &(0x7f0000000180)=@nl, &(0x7f0000000200)=0x80) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) close(r1) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r3, @multicast1, @multicast1}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000140), 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x7fff, @mcast2, 0x4000000000006}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 03:34:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x2000000080) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r0, &(0x7f0000002e00), 0x40000000000014d, 0x22, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="92f6f0033ba962c48b95d4174a071c3d58fe01ed2467d333f808f3b830902c75bf36f35aadcba36efa57fb41805231bf6cda08a1a443efe018879c09f826bc1250cc1e0c252f0f0532137332360e88f99b9f1363aa6c756efde584e65a74030773bf6ebf9d5846668f587006a65860fa0817914c8cc3241c25473ef7", 0x7c, 0x1ff0000000000}], 0x20000, &(0x7f0000000200)={[{@treelog='treelog'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x80000000}}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@nobarrier='nobarrier'}, {@usebackuproot='usebackuproot'}, {@noinode_cache='noinode_cache'}, {@nossd='nossd'}, {@commit={'commit', 0x3d, 0x7fff}}]}) fcntl$getown(r0, 0x9) [ 411.983320] overlayfs: missing 'lowerdir' [ 411.990669] overlayfs: missing 'lowerdir' 03:34:52 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7759646e6f3d64510fc19a47bef5bbc6c204330edc1a56b2f51b657aa4dbe40a31d595ddaf2b2daaeca7101e8805bca397360610b03710f95d6ad48d10d744769c8d78eebe77b2bacefe350761b6afd73d429e13303434bd4a3b358cc78766df1d2e0bb5ba82fae75f78e94cf5d091774cfe49e12ca3896dbb820da8d7ed9cea55b0dc9dda5465eafae64aab3a66f523e8eeb96b22cb9a8336d7f66ef922e487adeb06c143766e9e15ddbfc6a2aac68f1b5d29fca459a53f50e14790b27a034fb6a1dbb35e2bffdc9b876cc419d116486d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) write$P9_RGETATTR(r1, &(0x7f00000005c0)={0xa0, 0x19, 0x1, {0x104, {0x34, 0x2, 0x1}, 0x2, r2, r3, 0x5c8, 0x6, 0xcbb, 0x0, 0x5, 0xd0dcb70, 0x3, 0x3f, 0x8, 0x4, 0x40, 0x7fffffff, 0x9, 0x81, 0x528}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c61ffffffffffffffff73733d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f00000006c0), 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', 'ppp1/-/vmnet0\x00'}) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=""/122) 03:34:52 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r0, &(0x7f00000000c0)='fd/4\x00') r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x38, 0x0) [ 412.035536] binder: 24580:24590 Acquire 1 refcount change on invalid ref 0 ret -22 [ 412.064359] binder: 24580:24590 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:34:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, &(0x7f0000000240), r2, &(0x7f0000000280), 0x8, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) prctl$setfpexc(0xc, 0x80003) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000380)={0x400, 0x8000}) r5 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000100), 0x4) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in=@broadcast}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f00000003c0)) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000180)=0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) syz_open_pts(r0, 0x100) [ 412.089165] FAT-fs (loop7): invalid media value (0xc4) [ 412.095181] 9pnet: Insufficient options for proto=fd 03:34:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x6000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000200)=0xffffffffffffffff, 0x4) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 412.128075] 9pnet: Insufficient options for proto=fd 03:34:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000e00), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0000000000000000000000060019006febf9617b697b0a66c68d4e2f35edbf28be0162388ebbfeaf56eb24a72fb62a4302f0f9aa9629b0303a1ebfc9b810357046211c0e2436524aa69108c82cf2e8bc99ede6f65fd7acb86dc74ee9dd92efa6b6dd3b074b75956286a33740d0469526ecc022ac50645a71fdafd2f5432d8333101adc30d3f3504851edfacfd8aa02145460909aa55abbceaba292b366345ecc3ae225a42689efa2914d1e7e", @ANYRES32=0x0], 0x24}}, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x101000, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x1, [{0x3, 0x9, 0x7, 0x3, 'ppp0lo!'}, {0x3, 0x81, 0x7, 0x5, 'system/'}]}, 0x50) [ 412.174429] FAT-fs (loop7): Can't find a valid FAT filesystem [ 412.192428] binder: 24580:24636 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 412.192439] binder: 24580:24636 unknown command 1704546753 [ 412.192449] binder: 24580:24636 ioctl c0306201 20000040 returned -22 [ 412.192536] binder: 24580:24636 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 412.211201] IPVS: sh: TCP 127.0.0.1:0 - no destination available [ 412.327942] FAT-fs (loop7): invalid media value (0xc4) [ 412.338921] FAT-fs (loop7): Can't find a valid FAT filesystem 03:34:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000300)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) r5 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x2, r5) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r6, 0x22, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:34:53 executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a00, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0xa, &(0x7f0000000840)=[{&(0x7f00000000c0)="019fa7c955684affc96d76db9c7f9c11c67122b4a2ae599dd7282cc3f47613d3347b747bca85e391e8861695648141fb3f949d6987937cf88fa431a6e1ddf475201e630fd7", 0x45, 0x7}, {&(0x7f0000000180)="8e4a1c742c", 0x5, 0x40}, {&(0x7f0000000280)="d1c9e13cdfadc28ae1624b20007b184046abad4483850f2879d6c3d3a72d61420aa4a007d61a75c2981b020508492399d1408350b51b2a377a74c1cc586c6ca0f42b99b6ac2eb1ba5b38cb213ec0eeab58ec1d2563aa2ee64624a1c3f664c2d16b25371a354f67ff43e84b2b36923daef226a68eb9c4f9c28153f1e236532c0e624831d65873987a8f82448b5579e93300e1ca99e4a3ec8662a4178baa33343e21010bb9bc03f467e607d4d5e5f8d666b7c79bfe575d4015001cc0ac063e0afa0dc2fd9fdd90d3df74e440ec5330ffc168a7b4f94b9762efede34e67861fa7dba62f4f96918dc40d54cf26cb45d79e", 0xef}, {&(0x7f0000000380)="9d2ef0e55bfab0dbae9459a9510a0f84e2cf5998e0d9361fc968cc12f2459431ee36c62ca0341b46e031d03a02627175937fc325403a226201fa6c7ed4edf409eb6c3fc70b73c8ada4a0377e149f632f31e8ee141a09963b91f73e64030496224d3c0f62", 0x64, 0x10001}, {&(0x7f0000000400)="c8b7f58c85473b87ce153eec2b9ef75804964a1b36e19d1fbb2cd7e02c0f0bba42a652a768ceab4736c176d6f49ee04a6de2202eb9764d3662af6952928fac13d73f3a2ab35c4c73e1ebc98842bc3614245feac5dd7990aedeff44ebf28da99dab2693e6d01c42dd937600276907e09dd6208bf155a1da975446a8562d850de869af8d06e29041cbf6169644343be19d000c5ef8ab7d8d79b2c1442ec69352c6c3763d9e653dd6b93bc345afa41c0a3546d1a7214b54f10e3a8f33d3f6f1948f06685967656aaa42f62517ac2e6747669e84a46cb4281c2dacd4b71bf2", 0xdd, 0x1}, {&(0x7f0000000500)="69290acf4f9e07651b0f15a5c5c830148febcaae9f25def8850c5ad97b44b0c62004af872f63b62a844dc4835a604dc71d065b0b0f2ffb7681f6cf3fff2e1e0b0db351e3a228045071b26d925b6f5ed18a22dd9078a0a32d17cb1f3896f69b93db89f2416f75239d14ab7eacd176826e2170d7fd0f6946ad9bf468f4504973c7ea09c6c4bce5703df3dd1933385770205667240e2414e6a20e8ab238b6f649b90581d8e666edce2fdc570e50a6cd0c9c136887a7cd76294bd46635479b590401c6deb352635eaa98aae68d2e501d20b7529f82fe82c079cd3fbc6719aa12d6a486", 0xe1, 0x7}, {&(0x7f0000000600)="8ff43c9da68eda9dcb485449b812c816cdf3535eb7ddf82b48b1c1834fe8728472f82fcf05ef49b8157f981af02a4a4fe314b069bff7d0d8b5f75f44628e795bfdc2edd86cccc1d8e1b557cbdc27647ffd0bb51efe86bcd1c25b9cc9804b4a525e787b634d14ec2227f7", 0x6a, 0xe51}, {&(0x7f0000000680), 0x0, 0xcabc}, {&(0x7f00000006c0)="aa8136debe0e09843b9a8cbee11798557c80b92ab6ebc15b75896b0ef369ac5fcc24a833d83aebc0f8e6948ffdcca6e57fe8bd506902e8d376dfaa178925136b45e68bbc96ad6afca6991677737bce0f49155620c16b032128e608374f6fb4fa89b83fb28e909c496bfb44c9de3f6e623062a3968b38902bda77b107886fe16091f8c0a137479d04efca9dc8fa2770c6e8250ac0bc7a4a86103e68a4aed89614af285e5a022e35fbb8ea5624f42f4efc01aab6b3388c8195c96686577bbc6ed32bee8ffe8830ba9e06c878fa004b51529c1dac2ff4b4826873351b40471f020dd24d7b2c2c73fc849d0a613e7783b9f72d1f", 0xf2, 0x2}, {&(0x7f00000007c0)="acc5ce8c51014943b7f67b0cc10ab7aeb5d8106378cc21b117897abceb19e885c8ec61adc2919ec7b933ab3d777b6e1bbbc25089144f74bc8fc79a292aa779eaef16f2a2434faf480e84392e02d7954443d4b0343a66b58b0ce813a288b6e501f3412df20165bc3e846cb36bcb4018d597aa5429a7276d", 0x77, 0x3}], 0x4, &(0x7f0000000940)={[{@discard='discard'}, {@test_dummy_encryption='test_dummy_encryption'}]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x40000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000980)={0x2, 'bridge0\x00'}, 0x18) 03:34:53 executing program 1: read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = getpid() sched_setaffinity(r0, 0xffffff4a, &(0x7f0000000340)=0x1) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) write$P9_RMKNOD(r2, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x0, 0x3}}, 0x14) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, r1) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) socket$key(0xf, 0x3, 0x2) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') utimensat(r2, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) setrlimit(0x4, &(0x7f0000000180)={0x4e, 0x3f}) getsockname(r2, &(0x7f0000003b80)=@hci, &(0x7f0000003c00)=0x80) 03:34:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000140)='fd/3\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x384ccec0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0xfffffffffffffda9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 03:34:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) munlockall() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setresuid(r2, r3, r4) syz_extract_tcp_res(&(0x7f0000000140), 0x6, 0x1c0000000000) 03:34:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, &(0x7f0000000240), r2, &(0x7f0000000280), 0x8, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) prctl$setfpexc(0xc, 0x80003) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000380)={0x400, 0x8000}) r5 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000100), 0x4) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in=@broadcast}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f00000003c0)) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000180)=0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) syz_open_pts(r0, 0x100) 03:34:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x2000000080) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r0, &(0x7f0000002e00), 0x40000000000014d, 0x22, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="92f6f0033ba962c48b95d4174a071c3d58fe01ed2467d333f808f3b830902c75bf36f35aadcba36efa57fb41805231bf6cda08a1a443efe018879c09f826bc1250cc1e0c252f0f0532137332360e88f99b9f1363aa6c756efde584e65a74030773bf6ebf9d5846668f587006a65860fa0817914c8cc3241c25473ef7", 0x7c, 0x1ff0000000000}], 0x20000, &(0x7f0000000200)={[{@treelog='treelog'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x80000000}}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@nobarrier='nobarrier'}, {@usebackuproot='usebackuproot'}, {@noinode_cache='noinode_cache'}, {@nossd='nossd'}, {@commit={'commit', 0x3d, 0x7fff}}]}) fcntl$getown(r0, 0x9) 03:34:53 executing program 7: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0xffffffffffffffff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4080, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000000c0)={0x2000000, 0x1000, 0xf05c, 0x80000000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) [ 412.832542] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 412.850075] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 03:34:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/arp\x00') read$FUSE(r0, &(0x7f0000001400), 0xe19) 03:34:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000006c0)={0x5, 0x70, 0x7ff, 0x3, 0xe50000000000000, 0x7f, 0x0, 0x18, 0x200, 0x2, 0x7, 0x1, 0x80000001, 0x8, 0xfb, 0x3f, 0x0, 0x0, 0x6, 0x101, 0x4, 0xff, 0x7fff, 0x9a9, 0x101, 0x80000000, 0x5, 0x5, 0x100000001, 0x800, 0x3, 0x100000000, 0x57, 0x0, 0x7, 0x1, 0x9, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x1d, 0x1}, 0x4000, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7f}, r1, 0xd, 0xffffffffffffff9c, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)) rt_sigaction(0x0, &(0x7f0000000180)={0x1ff, {0x5}, 0x88000000, 0x800000}, 0x0, 0x8, &(0x7f00000002c0)) fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) sendfile(r2, r3, &(0x7f0000000240), 0x20000102000007) r4 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, r4) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x8) ioctl$RTC_UIE_OFF(r0, 0x7004) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) 03:34:53 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) fcntl$lock(r0, 0x5, &(0x7f0000000140)) [ 412.861928] IPVS: sh: TCP 127.0.0.1:0 - no destination available [ 412.872710] binder: 24686:24689 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:20 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x3ff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0x4) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x200000000000043, 0x0) write$FUSE_LSEEK(r2, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x5cc}}, 0x18) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000100)) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x2f6) 03:33:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="035cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, &(0x7f0000003480)=[{&(0x7f0000000100)="2727b192a3d264f667ccf9931fb5fe7f752d22cef0db7a266c387b19bda3939fb619db6305bd8e72efee6f650787048c54e9d89f595ffa66cd985144c7397973659637012a886d2c8d0fc604efff1cd9e8859ac9c958d9f204dbf99415c0f60acb8a2f5623c8dd857d76bc391152971df91d05f62fe1ad9fd88f0085a8bd1c5d7a85d4a1608869d5264af0c408a6ac521e644af677eb59d5487751c19b410ab71b3f88182cb4450cc01902f4d86150eee0b5c7", 0xb3, 0x7ff}, {&(0x7f00000001c0)="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", 0x1000, 0x10001}, {&(0x7f00000011c0)="2d98be3f15e96dc7795231010697f8e609f177ea28cf14e9c52c8ee6647ea3362814b9a6a7c47105c813feca9526b268f5ba4f5519bc84b08b61d9a7f8cd40b66d73e4d979a0808358734bc9999383", 0x4f, 0x890e}, {&(0x7f0000001240)="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", 0x1000, 0x1c}, {&(0x7f0000002240)="e866651559103e85e395b031df8dad72c1cc8f60f99e25f49d9b4438e3bba2748ace54c64df99ac560cd9e3879e39eef7774780259a773c4490e82cf1d16fe00925349e5ae27a98ac8e7ca499d6b94956b9a5d4a998ab91e53af1e8789eea0e18d65f1b453e8d55c5a3568228da36d164f349f8cc639d363fac3e20d7cf9417d4d777e3acedcd55efb7e04f557ab52ae4a7e6dbe00205bd720976c999c68f1ed25d7dbe155cb4082a8e550fffd996a5b6703501a48b813579de823237a5803e1401fb6660cd369807ba23d2fcb39d2552e88596bd2220d3f1cbd9c9249d438c67a42b91e8b30a9aeeb223a7d22", 0xed, 0x5}, {&(0x7f0000002340)="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", 0x1000, 0x2}, {&(0x7f0000003340)="7f346725a775db12c2e2975ceabf6c9b505723830544b81d1f010df4c2255adf430cdb491b86ab6c107ac790", 0x2c, 0x1}, {&(0x7f0000003380)="896658fb4614a1c3425cc0c9afd0e0284e9fcae48c513e29dd631a92d633b39e5c5a65eed7c08e53ae05f9278c5aa0eb8de9e86b61bdf0b354333d4fb2daf8f8ef8a0a69a1e203b2a9ce27973e9ce3db33d2c0aa8add2f98da10ab34aba571943423dde91096a1467571536ffcdbcd96bf31e543aa3a48ccb4175a918e51aec3f1f2cc1b620a8b48b0b7976903437364991593af150349d40705acda951f96d2893f29bf31715f31fc295a12606d1155a6a77ab2eb8583a18cd5b44a321180fabb87ebf2d6f5cdcf36f5", 0xca, 0x517}], 0x20, &(0x7f0000003540)={[{@noinode_cache='noinode_cache'}, {@degraded='degraded'}, {@treelog='treelog'}]}) setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x8000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000003580)={0x5, 0x3f, 0x305e, 0x1, 0x3, 0x1}) 03:33:20 executing program 6: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='bpq0\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000000)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) prctl$setname(0xf, &(0x7f0000000140)='mime_type)\x00') setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x6, @ipv4={[], [], @multicast1}, 0x4}}, 0x5, 0x100000000, 0x8, "0c9b7413815742943ce39d2a22326a38a2f233307858934ed28cbd1cf401e51512ce8d6ec03f91028ff553bba451ae68d7124e1507c0fc4c3e7c68fd4cc54c26321e2cad36062cb99e2b2df3d6c0ce02"}, 0xd8) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') [ 412.874955] binder: 24686:24689 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 412.962488] binder: 24686:24698 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 413.034831] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 413.059375] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 413.078347] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:33:20 executing program 4: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000140)) r0 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000000)=0x8, 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed640adfa9b0ff6e1837ad8aa80203e40100b7000600", 0x24) 03:33:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @local}, {0xe0000304, @broadcast}, 0x80000000000003, {0x2, 0x0, @multicast2}, 'lo\x00'}) getsockopt(r0, 0xa87, 0xfffffffffffffff8, &(0x7f0000000040)=""/11, &(0x7f0000000100)=0xb) [ 413.078572] mmap: syz-executor5 (24718): VmData 35143680 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 413.146740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 413.184295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 413.209449] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 413.228188] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 413.331338] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 413.341165] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 03:33:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x17, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) 03:33:20 executing program 5: r0 = socket(0x10, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x58) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x48, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_SRC={0x14, 0x2, @ipv4={[], [], @loopback}}]}, 0x48}}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 03:33:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0), 0x1f9}], 0x1, 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xff01) fcntl$setstatus(r2, 0x4, 0x4000) write$selinux_access(r2, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040), 0x35b}], 0x1, 0x0) fcntl$getown(r0, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x5, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) ptrace$peekuser(0x3, r4, 0x6) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@empty, r3}, 0x14) creat(&(0x7f00000000c0)='./file0\x00', 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 03:33:20 executing program 1: read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = getpid() sched_setaffinity(r0, 0xffffff4a, &(0x7f0000000340)=0x1) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) write$P9_RMKNOD(r2, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x0, 0x3}}, 0x14) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, r1) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) socket$key(0xf, 0x3, 0x2) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') utimensat(r2, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) setrlimit(0x4, &(0x7f0000000180)={0x4e, 0x3f}) getsockname(r2, &(0x7f0000003b80)=@hci, &(0x7f0000003c00)=0x80) [ 413.688709] binder: 24758:24762 Acquire 1 refcount change on invalid ref 0 ret -22 [ 413.721121] binder: 24758:24762 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 413.808739] binder: 24758:24766 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4006}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 03:33:20 executing program 7: read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = getpid() sched_setaffinity(r0, 0xffffff4a, &(0x7f0000000340)=0x1) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) write$P9_RMKNOD(r2, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x0, 0x3}}, 0x14) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, r1) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) socket$key(0xf, 0x3, 0x2) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') utimensat(r2, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) setrlimit(0x4, &(0x7f0000000180)={0x4e, 0x3f}) getsockname(r2, &(0x7f0000003b80)=@hci, &(0x7f0000003c00)=0x80) 03:33:20 executing program 2: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c6641aa80f04", 0x2c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 03:33:20 executing program 6: keyctl$join(0x1, &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}) keyctl$session_to_parent(0x12) 03:33:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80001, 0x0) fcntl$setlease(r2, 0x400, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = dup2(r1, r0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000240)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x2, {0x0, 0x0, 0x7, 0xb3dd}}, 0x20) fchmodat(r4, &(0x7f00000001c0)='./file0\x00', 0x1) 03:33:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000540)='/dev/keychord\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000500)) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x639, {{0x2, 0x4e23}}}, 0x88) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40010004}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd8, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4080000000000}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x98c1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4080}, 0x44080) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) getuid() pipe(&(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[{0xe, 0x20}, {0x3, 0xc71}, {0x2, 0x1000}, {0x4, 0xfffffffffffff00c}, {0xa, 0x100000000}, {0x4, 0x1}], 0x6) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x70, 0xe45, 0x0, 0x800, 0x5, 0x0, 0x4, 0x0, 0x4, 0xffffffffffff11fd, 0x9, 0x4, 0x9, 0xfffffffffffffffd, 0x500000, 0x7, 0xa8, 0x526d8c42, 0x14a7, 0x5, 0x80000001, 0x100000000, 0x4, 0x100, 0x6, 0xfff, 0x9, 0x55, 0x810, 0x6, 0xffffffffffff7fff, 0xaac8, 0x4, 0x3, 0x11, 0x9, 0x81, 0x0, 0x2, 0x6, @perf_config_ext={0x4, 0x200}, 0x2000, 0x8, 0x9, 0x2, 0x7fff, 0x7, 0x1}, r2, 0xf, r2, 0xb) 03:33:20 executing program 6: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) 03:33:20 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) creat(&(0x7f0000000280)='./bus\x00', 0x10) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e003ac13a78b54f2553487882f6865a6de0c7aa6d05818e7fb5ec432d2b13c433", 0x5f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffe}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = open(&(0x7f0000000200)='./bus\x00', 0x4000, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x31, 0x2, @thr={&(0x7f00000002c0)="a1ce9019efdab16b32a79ef956bb0600d0f54004e8c1ac24b4f9bc748ffa08085f803583bfa1acbcf2c2c0576b7461e3a0e51c4a85d9b140b4043b6bbef28af5ac14971666adf374d92e525b19756b5ab5ed3201a71e361427f6bc3e3696203dde69776e308ea9e0c01bee8d6054550d2b2ca3709279c51ae85ac454d712db52a50dec0bb4dc5c9c5b2a3ccf4f27b7c87391d4abe221d02b446d0a4dff78029baa359506d435ac71ba1e750ad1c4d275d004aac6b4d33f9cea25a47aa9812605dbc192c4c0538d18133f0043cd6b6865513f8871d37bc375a2d46fe59e37dd748f2ecd5c228d4ce177be7ccbb6bb8aaf1479", &(0x7f0000000140)="207e49ca086eb4f27f09c5f07ce4593a823da1f5df8a4ce114aa4dfcb4f479c70885d19a95bdb7265ac976872f03e5329315b597cc7f088fd89c1633762bd562e142e3e428653fbecb59fbb5bed701a8c4c14bf4"}}, &(0x7f0000000240)=0x0) timer_delete(r4) 03:33:20 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x101000, 0x100) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x2, @remote, 0x7}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x18}}, 0x4, [0x9, 0x9, 0x3ff, 0x7, 0xff, 0x0, 0x8, 0x1ff]}, 0x5c) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0xf3, 0x1, 0x81, 0x8000, 0x1f}, 0xc) sendto$inet6(r3, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x10100, 0x64) ftruncate(r5, 0x7fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 03:33:20 executing program 2: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a0000009b10c8994ad0bade000000000000000000000000008a00000000009ac6ba000a000775d0002e2f666902"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) chroot(&(0x7f0000000100)='./file0/file0\x00') write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91da12139adacec04892aebab1e8c906cc0ca5cbab88d7f"], 0xb3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = getuid() r3 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x208, {0x60, 0x2, 0x5}, 0x80, r2, r3, 0x8, 0x1, 0x4, 0x7, 0xfac0, 0x1, 0x40, 0x3, 0x5, 0x1, 0xffffffff, 0x1, 0x7fffffff, 0x40, 0x1}}, 0xa0) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) 03:33:20 executing program 7: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init1(0x0) mount(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r3 = getuid() r4 = fcntl$getown(r0, 0x9) sendmsg$netlink(r1, &(0x7f0000001880)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc, &(0x7f00000017c0)=[{&(0x7f0000000180)={0x258, 0x24, 0x102, 0x70bd29, 0x25dfdbff, "", [@nested={0x6c, 0x7a, [@generic="cf29ab8d285e975770b5f02b67e19c0ca9ac1339251c2cc5d230f745022bd184988ba102154043b3637777bc815fff74b5fa88e8e6c8370602c40b30ef47dbdb21f4a4b429c184da4301f948065b4b31319a08", @typed={0xc, 0x8b, @u64=0x7}, @typed={0x8, 0xa, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}]}, @generic="708ce70c66142f8fd8d50921b59cb772a865585b1419040e13c5ee2bee2eb168e660450d29d0009efef9be06a909441cdb242101d0ef823c8cb6f829b1bf2523d3a83abc3be5ba4c79dea218ac761b45cc5ad776920f4a077cc0244cb3c973a29ff3462b18b1c26c58da604196460453d5dd822cda8605aedbeea4f6d645c8e90e35108a6dfc998218fe4e14bd2a173eff52ad2f842d9cbc8b0139011b4c0a8c685eeb58bd1cce84eb9d443200920d34cb1f864f280cb9a6bd67be06adf845da4c0f822422ac627ddca0a700f796c49938677687f15b4d30", @typed={0xc, 0x94, @u64=0x769}, @typed={0x8, 0x3d, @fd=r0}, @generic="6b791c4ab4c75f300d0ef59e9b51972523a581543256975f205fddf9dd5691a8a2cf979d3e8d343047b155edfc4372526f9eee56cf9ffabad3dd8ef07f7f3b6fd1af2d7c87f2a3365df2e6a39b07bdfb9782bbeed839e894d5acdd7142f9b24a6763e8a1731462cf868d97c6a4ffa4ab577a9487e801dce561e6a2754938a258875c6ffa58782492524eda151b73a4ca24c30d5f3914cddbdc533b40556c56dbd5ebc6dc9bf79526e621ed0b0c835c6bba9551c04d75059d583fc97073abade3d6d2658739e011fdb2e8679d60f460657800925560f082f3527c993ce693301334", @typed={0xc, 0x45, @u64=0x10001}]}, 0x258}, {&(0x7f0000000480)={0x132c, 0x35, 0x400, 0x70bd25, 0x25dfdbfb, "", [@generic="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", @nested={0x11c, 0x54, [@typed={0x8, 0x20, @pid=r2}, @typed={0x8, 0x5c, @ipv4=@multicast2}, @generic="8a2e9719a5958f14aeae7d93088e7195d6248a7892b8b9a0218f5a8d3740e5d6b917db8524665b46957d6c2c2263c35f6d7126e9726f69735a8b7ef53571d5843cad1d0194a81cb2d23cfe03fde6", @typed={0x8, 0x5f, @ipv4=@rand_addr=0x20}, @typed={0x44, 0x7, @binary="b96cf3971d7329a5c08e8fc5ba11c79d5606a2a94f2c49bc101da91fa04f28f6c9fd79ee9b0c92c5dfca5df835ba14750e0fc6a182243a8f28300ee0139e7d7f"}, @generic="069ba4e25762707e72ce48486187b0a32bf892961eb9756d05d0bbd17f7465d852ac55fbc6df96d7e4efbbc3e85cd020612fc257d9d282236c6398480d7a93c8d2a152f9fb2f55f0fc072cae490eb41388e28bb1c26a3129dc2c87e16bd565a98a62dedfd596db4db02603"]}, @typed={0xc, 0x7f, @u64=0xffffffffffffff81}, @typed={0x8, 0x3e, @uid=r3}, @generic="a187ecdd926993f3bd7c6e8753ad77e32160042998dd13842cedb8f26e2aae0546bb10fa06f8c1c1ff72353a060e2138c9a01a3727aa947c3a6020ca51a943b0321b8a64cccafa982282269197b50491c04d420796c3981260ee32bc25c6ca0549ec28fa155daa3d99dfaf0b6158dcd52204ed6eb19b6c024f69b9ec668336bf", @nested={0xa4, 0x18, [@typed={0x8, 0xe, @fd=r0}, @generic="2df9a99308dc97e6f5056011176c2a68b590aa09d531a0b695c3a35bfd565a6d708879ec5eb419cab6d4ea2ff046a7fb7c0ef01de7e1d77fad7564a5b41d32a9e9a87815df804101ef819a3b5bd8204c7561685d50310c25dbd7321013fbe1c0ab67b3930be1a57dbabcc3b5dd44395b4f87183a0f605e9327a9be77d4079dcc947d00ad2eb8f7a66adcae8e5730f6b91abb0267a1"]}, @nested={0xc8, 0x75, [@generic="1356c9609b5879ae77d44e0230b9e296a7b647bdd56613f67bf7d5f2b46d078bf6801c16ab390296d17eb5b4c42cba7da105f923cac8eb731669b90e31c29888ac27d0a46861f722c90709671bd55efeaa7259591a5333034f5c04d2a8f10fb8587f18654c165dd5b766136a3038e556f0739082ca32f388cb40dc75656023ca06b9189cd223dacf52cc8c0b376d0bee08fcf5cabab56f982c4ca06eb97644c47077ce8a0dcf1143941d1b22230365ba27ec7ab7d2ee56ea48", @typed={0x8, 0x3a, @pid=r4}]}]}, 0x132c}], 0x2, &(0x7f0000001800)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0x50}, 0x4000000) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 03:33:20 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)=0x80000001) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_extract_tcp_res(&(0x7f00000009c0), 0x1, 0x10000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@dev, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) bind$packet(r0, &(0x7f0000000980)={0x11, 0xf7, 0x0, 0x1, 0x4, 0x6, @random="38587b24e1a0"}, 0x14) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) getpid() r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000180), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="00966619225a8a010f0a5ac716a55c5a3a28de8e7e963638a8f3ad22636c9ff2d42ecbb27eb716bb553402a751a3fc80b166c09a485edb56ac6c6fc5975be0585fff36be049def871f92303cdabe800269b8c147", 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000180)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000000a700)={'tunl0\x00'}) 03:33:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '\x00'}, &(0x7f0000000140)="f3776c616e316d696d655f74797065282d62646576245b63707573657473656c696e757823252d6b657972696e6700", 0x2f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) 03:33:20 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) pause() read$FUSE(r2, &(0x7f0000001040), 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r3, 0x1004000000016) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f00000000c0)=0xc) [ 414.586811] attempt to access beyond end of device [ 414.591771] loop6: rw=536870912, want=114, limit=112 [ 414.597948] buffer_io_error: 120 callbacks suppressed [ 414.597955] Buffer I/O error on dev loop6, logical block 113, lost async page write [ 414.611584] attempt to access beyond end of device [ 414.617144] loop6: rw=536870912, want=115, limit=112 [ 414.622355] Buffer I/O error on dev loop6, logical block 114, lost async page write [ 414.630219] attempt to access beyond end of device [ 414.635163] loop6: rw=536870912, want=116, limit=112 [ 414.640386] Buffer I/O error on dev loop6, logical block 115, lost async page write [ 414.648272] attempt to access beyond end of device [ 414.653197] loop6: rw=536870912, want=117, limit=112 [ 414.658339] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 414.666153] attempt to access beyond end of device [ 414.671116] loop6: rw=536870912, want=130, limit=112 [ 414.676274] Buffer I/O error on dev loop6, logical block 129, lost async page write 03:33:20 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'team_slave_0\x00', 0xc800}) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x1, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000140)=@fragment={0x5c, 0x0, 0x68ab, 0x5, 0x0, 0x2, 0x64}, 0x8) fallocate(r3, 0x48, 0xffffffff, 0x807f) pkey_free(0xffffffffffffffff) ioctl$KIOCSOUND(r3, 0x4b2f, 0x5) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r2) syz_open_pts(r1, 0x80080) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000200), 0x4) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 03:33:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close(r0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x4000) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0x6e) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x40, &(0x7f0000000640)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000300)={{0x84, @loopback, 0x0, 0x1, 'sed\x00', 0x8, 0x6c4e, 0x70}, {@empty, 0x4e24, 0x0, 0x8, 0x0, 0x8}}, 0x44) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000003c0)=""/209) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000100000000000004b000000"], &(0x7f0000000140)=0x1) syz_read_part_table(0xffffffff00000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000), 0x0, 0x1a0}]) [ 414.684079] attempt to access beyond end of device [ 414.689067] loop6: rw=536870912, want=131, limit=112 [ 414.694199] Buffer I/O error on dev loop6, logical block 130, lost async page write [ 414.702055] attempt to access beyond end of device [ 414.707748] loop6: rw=536870912, want=132, limit=112 [ 414.715757] Buffer I/O error on dev loop6, logical block 131, lost async page write [ 414.724040] attempt to access beyond end of device [ 414.729281] loop6: rw=536870912, want=133, limit=112 [ 414.734582] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 414.743915] attempt to access beyond end of device [ 414.748983] loop6: rw=536870912, want=2174, limit=112 03:33:20 executing program 0: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x6, 0x4) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) listen(r1, 0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x209, 0x23fe, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0}, &(0x7f0000002fc0)=0xc) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x40, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8001}, 0x4c000) r6 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000003c0)=0xc, 0x4) sendfile(r5, r5, &(0x7f0000002b00), 0x2000005) socket(0xa, 0x1, 0x0) 03:33:20 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) creat(&(0x7f0000000280)='./bus\x00', 0x10) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e003ac13a78b54f2553487882f6865a6de0c7aa6d05818e7fb5ec432d2b13c433", 0x5f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffe}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = open(&(0x7f0000000200)='./bus\x00', 0x4000, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x31, 0x2, @thr={&(0x7f00000002c0)="a1ce9019efdab16b32a79ef956bb0600d0f54004e8c1ac24b4f9bc748ffa08085f803583bfa1acbcf2c2c0576b7461e3a0e51c4a85d9b140b4043b6bbef28af5ac14971666adf374d92e525b19756b5ab5ed3201a71e361427f6bc3e3696203dde69776e308ea9e0c01bee8d6054550d2b2ca3709279c51ae85ac454d712db52a50dec0bb4dc5c9c5b2a3ccf4f27b7c87391d4abe221d02b446d0a4dff78029baa359506d435ac71ba1e750ad1c4d275d004aac6b4d33f9cea25a47aa9812605dbc192c4c0538d18133f0043cd6b6865513f8871d37bc375a2d46fe59e37dd748f2ecd5c228d4ce177be7ccbb6bb8aaf1479", &(0x7f0000000140)="207e49ca086eb4f27f09c5f07ce4593a823da1f5df8a4ce114aa4dfcb4f479c70885d19a95bdb7265ac976872f03e5329315b597cc7f088fd89c1633762bd562e142e3e428653fbecb59fbb5bed701a8c4c14bf4"}}, &(0x7f0000000240)=0x0) timer_delete(r4) 03:33:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="d186e604d2f7726f12dd0e334542b3ba6549efa392f35738124b4b0e5f2510108ae0f060c610c8f3ba9ece4551449721a69f06666b1cf8a546c5caf3898fed2f641f2d19fffc1b1532eaa878fbf37700"], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '\x00'}, &(0x7f0000000140)="f3776c616e316d696d655f74797065282d62646576245b63707573657473656c696e757823252d6b657972696e6700", 0x2f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) 03:33:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000001380)=""/147) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$key(0xf, 0x3, 0x2) r11 = memfd_create(&(0x7f0000000100)="000080a8", 0x0) ftruncate(r7, 0x20000000040002) r12 = fcntl$getown(r4, 0x9) sendmmsg(r4, &(0x7f0000005780)=[{{&(0x7f0000001dc0)=@llc={0x1a, 0x314, 0x101, 0x0, 0x3, 0x7, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e40)="cac1cf163346c61db1acad27dc3e5eba6b39b7aec76788e7b74a9e3d9653f52e945dfa854a2dc8215a898c8e67248e756bd22356bec07b09a5f03e968578aa88b55bd3c19058", 0x46}, {&(0x7f0000001ec0)="aea306fa1e364698792e6024c83dbd0f14e0c59255d9bec9199b39d24715fc9c4c579abf3a1890a8a3bc252dbf75e70750569a1cab999b6682898b84d73e652725ed4237031589b4a42cd58012196ad5f2fb065dd874a69bf7ec9110ba1f094faf6efa279746ebd0c7d993ebc0b57a1897e281a0572314e7cb4ca5f74097139837fe4e7b3aec7ebbe7d79449c2af66f19e0ba45ee3ff1caf274b845f", 0x9c}], 0x2, &(0x7f0000001fc0)=[{0x1010, 0x6, 0x5, "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"}, {0xf8, 0x10c, 0x3, "3f595b74815ee587e4e9d457940acc7fbd37f6381ab3223e9cb75c09cb1d8274d32ba5b33f0325ab864ed96bc468ac1a6ed32e0470a153a181365d8f8b5daf37a411c4b38f01d2065091c06ffad1672c16b72f54d18abe404bd6d59350457a8a4e45e87ef3a0ca22de54bc5dfbcedd71f4b5d35a4e5b361ff40a2b9066887b8d2feb71f9a3f65dbabc44661e5f7be7bc4ac6f52d1f272ab79c0e2183ac6e0036202820c32992fb06192fd8c4f01ed9d88ef6b73322f03a662b1102ab3d095c484d960eda1ee576eba32b1948b040ce945def5941a564ec8739d1cc4d3f0b870dc5"}], 0x1108, 0x80}, 0x1}, {{&(0x7f0000003100)=@ax25={0x3, {"d55e1dc0274837"}, 0x1ff}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003180)="33b1b82836f5047dff2f99d9d2e50612be0c2223c61897e843d1886ca91773319a5da1d27f838d5866e43eb908fa79df7e53421062696cbfcf2ea8245d0df5a8c05e944598321377de1850c854cf0ae80a346984465b72678800d2990d35704de0f47d14154c88a51e9484ea008259b2d483ca3c049b189678d4", 0x7a}, {&(0x7f0000003200)="2ddad436d4a1602bfa114d26ac18197483bf3700c5ef41673ceebd706900781251f5c8fc87ead2a0b00926b5f310841f2ac1bf25749f5933283dddb940a1135cbae85dcbe42823f864e155b421fa53462c665c0cd161d79eb0baa527450e59218f28710d12b0b9c88d8fc4a62646", 0x6e}, {&(0x7f0000003280)="78986ff08bebe94e4d87896a66279907e72a0125b8eb659eaa8dcb531c159758046b7b09a82b280891d00dc41183c0beb26106ed0bb4bc", 0x37}, {&(0x7f00000032c0)="ed213ad81d542f530b4a295f86bc7a0f44b2ee9d1c0ed281171dc1a0cb60ba15d47cd9c8e4e7c6e3aa01919400cc2180b8729712889dc84f8ee7f664eb73c3dfbaddd04c10e5bc6d64c97a1960b2b40a4e663cc85d313b470a4d76354957f5e1b7db1bbc235bc448989f3ce2ef0f335aff81ef7a4e9a4fd2124b94b0fd94532cef7dbe426f500ad3c0f09a64b3008ad005dab173345c5af5be1105a0feed9f1ca7317d83627f671817e42ca8561dd8cbbe30b1ea40ee5e72bdcde4875e90c210a95e9b84ffcb9e87ad87edf5cefb7fbdbbaeebd1dde29858fb44def0c20c126e10b01b656c40c9dfac1b20fe90795b55deb0bc8e8240a85b", 0xf8}, {&(0x7f00000033c0)="8465f078be166beef33afc27ebd7fa1247bb9f12ac09399285265f5625fca14b55b06c4b9445e5887eae1e8a010b94aff31fbe8c87024c16c3687d9c4ca0bb2434434d280317853672c7ab626fad55a0a503870f3adc76a220a2d47d8fd4e19664d8ba33323897a6cc2006163935c0e9ccc97759ba5f4e77aa496448b8d13e415f9a7634a8666d765f07ca17ee1fdcfb56c91981daaf9e5706bf15085e3f430ed18ee1c716d658aa", 0xa8}, {&(0x7f0000003480)="f71e5ddc4e70e6896a3bf13b343da952f9d1ac41ec4eb9cd098218e919e5ddc903b5721ea9be93d4c9c6ccb1cd1ac79cfd121d9350aa0ed8c86fac89e470a2fc55fd0d5a1821", 0x46}, {&(0x7f0000003500)="4af534504ccaf0bd78c8fab23d7700492289de3caa92d1b6e2c96d0fb7bb79e53d8e2978bb933402941eb613490825f775679f3bcddfb8ccb097cfbe6b91d6409abb981bce50eea64726722c0cba67de845c3715cea032d900d5a1b71bc4cd5f6b55bad3244947f6876a14d1b442ac5abf360727fdb07b3ef604d09b1e", 0x7d}, {&(0x7f0000003580)="ea95344276ea8644e82fd9985053818a972a326e8fdb273f8e312a2c62d3d0d6606798b561d80489e8a493667c06d35f423ddc61948c6fa416a5d275c309be27324096d2653d957355773265672ac4a62fe0601da91650f9cdaebe1a45e02931a8dd3ddc176b08602b64538785693e6e90681cf2bc2f8c5c37ed07e6de84ea0ec2d9533fb16495e4d659b0f2cb6c1ec2b86bea12db81c94d533cdfe112966a205667fa549c6c5c7c12a5403b2adc9c42d876009ed2d7571734cd32a5649a37fef4f3f5245ae9b9b196af49f0cb034982984cad29a9cbeab55ae611061e482db9f858dfb115c58b2eb519a930505fa02abdd82a6c26", 0xf5}, {&(0x7f0000003680)="84441d72410fe4fbfe4b6c6c3f40ba82d7da941b0072e673", 0x18}], 0x9, 0x0, 0x0, 0x4000800}, 0x8}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003780)="ff46a04824b134bba59f90bc2b7dcbe787081323896aaf3a974bcb344a1440bc1dacd7e65177b9d737ad117993", 0x2d}], 0x1, 0x0, 0x0, 0x5}, 0x1}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003800)="7a6cb0672550f68d1e899bc06b20c0995d156690588640c4a7dd86a3498dcb102b4352726480c007881143cc9113354b723f4b4729ec5579f089f029975b5ddcdbf5b68d403c52a82df35d2546192b1c4725e921ce60503829d87fe46e82492580c7175fe4e96f700c9f42b16ced9ef41446eac6f60ea80fc6639f7f09cb8cb60693bca309edbcc7cd8e81fd7673bca72e23e1c344954876db81361c5ca89741107e87b8e80cd986674c01a328b9f61a1962d4858b", 0xb5}], 0x1, &(0x7f0000003900)=[{0x1010, 0x10d, 0x8, "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"}, {0x58, 0x104, 0x0, "65481679d6efcc94b9a325a95b925f44fa30ae2e99aa03f2250e7962a86233ce48e2604fdb234f774d0cb16d4c6f3ca1f948296fc1b25f535efddffb22fa1489a976"}, {0x18, 0x18d, 0xd1, "6d5d8fcc84e522"}], 0x1080, 0x8085}, 0x3}, {{&(0x7f0000004980)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x4, 0x1, 0x4, 0x2, {0xa, 0x4e20, 0x2, @loopback, 0x4}}}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004a00)="4975e7595c169502e7cdb3c6a8ca3414f8e5fddcc628c7364837c7a91053077f53e7838fd455a68959c1b19f22d405209a7525263521ca80ae6c95cdd8d4fbc4aff685ae875a138f520d84245c40a207ea04fd8702741ef04a61e378d2d390b449662632f9d444ac03feb94cf0269fc19fbd30986c927bffd7c5aa564f4dc4d202e520147a1284b3b82bf2a541b2b002b5bfca2b1a632dfe8a2cef9af448f90d4b9a964a20aa1dced63d", 0xaa}, {&(0x7f0000004ac0)="cc8c717e526a65ef12edd76466c4801bb537985d8392de427305b448ed2241ab50", 0x21}], 0x2, &(0x7f0000004b40)=[{0x48, 0x117, 0x7, "c8ba94ce6f0e3cf35c818073e8047ba3da4b8a49f99522cda9e4459c2e0d61d41fcc8e69b29a238063e76edcd6199c49c3d10d"}, {0x48, 0x11b, 0x77, "05b184f181da15aaac86e2d9e65d7c3ff0920560fc97cf45df8db3c90925f95d8c1137f803c0906c00e3a2cda1be403cf9e71d85b4"}, {0x48, 0x104, 0x5, "9a240d5df636afb879ef4c08c93e6e007fed585f241807fd72b05f9a43a1c56ef58538ea76642617945caa84ceab4634c4142a1beb7bfc"}, {0xf8, 0x111, 0x6, "2f56fca9764fc7fe50c3d416dc2b4fa4f799b5b46fafe969627cb51c125c70dd8ee00ee61305be88d13eaccb372967ad5432593abedae0f4f0e2d6d87322344ef2f11567bacaa745d19e09a205da94142cedaa15c6453bbb7e789555caaae3aab7dbf6394969441b8f3756535b5ff74e2f67abf9a3bb09e9205a636b54cb6ba39d816b1dce595e043fb91d32346e29ef2d61816af73a0ae79586c1b72346325fcf5fa8e8a42a689fb6101c04d4b0bc20d10970e69dc5d6f95ab207f9abb88dbe19c13e74f36d2ffe3e3dd4b88c987cfe054deab5282b4aa79e76cc12319174b738469769"}, {0x40, 0x11f, 0x9, "a7245abf7b85c08dba83e0a5992cf4a15ae202efe63fab5dd0ce268a67d3c6f1b37a58e91857b1024e4ad68afa1c9906"}, {0xc0, 0xff, 0xffffffff, "f0560873db482cff0db3c75e4602d7185eb3293f72fe89a88782ace3d910f751eaf7d6ec79e49656196acc5d059bca230633d81e401c879e5dc053875615c2b600e778b9e801fcc3c5bae89685f427694132c35d13af8261313b188c7bfe9cd671091459c5de2cbc626ac8ca4099db96766d77c822f51c1538664947daf108412b0c4bad02aaab33329dc08b6c60f461a003be1ef5f0d5fe504f5ff979be9a75d582d12907dd924b7abc0adb6d7fd2"}, {0x80, 0x109, 0x4, "a7a90660524afcafec18eff1f728d99cc9afc366a1c582f4fdf910247cbdb95c53c23c162d8d9d25ae47576d309b41ff87a4af9625b846d1a0a19e6deafe11708e98d1d0a14f571415f8fb9b875e3a37a08ffdd6e42e23f350b6c5fef81433a26333ca5cbaf186a5c4a4e7ed539d"}, {0x70, 0x6, 0x79, "dc0543768e0ca6e1681d20dab1a64f55d7cfb8f6d0f74d4729b5030c31d51270c50699f6e810c98443bad531c05e93a8e017906cea413b112f096f52d610f9a557064bdb45e6860ab09969493ce1700a81a4b6cc0be35b7422c8bf6f47d2"}], 0x3c0, 0x81}, 0xb00}, {{&(0x7f0000004f00)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000005380)=[{&(0x7f0000004f80)="398053dd29ef4140256eab72fa60a4d9c04a948ab107f94f618ccdb575f6a9b1909be713021ff51e77bf509f117dc7324f7977bdc957a4b91ae12deca3572129bb97c9348648dd3b05712e6e0f356db7a2edd4fa70d2691da0", 0x59}, {&(0x7f0000006040)="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", 0x1000}, {&(0x7f0000005000)="16a99a5ed495beef12e1775fafae1345dfbc12d4c3240a45ea24aa3d5c71", 0x1e}, {&(0x7f0000005040)="df377120d0bbf61c20d0462abd336a6c912d29974962cc6c3bedc5745514e71d6966169d8141f7012f47c1c94de95c4bf7274b6418965ea794193d1cf5b10bbb132b1b1a32a28366f66c9b2fa1f7d6e8aab16f3f866fd8ec9baeb964bed713a7cac41d0e091940a4efd9f89ec57863724d74bcd5c41c5f866b5d013eaabbfef8689895dfab5b402ea2fcdb560855def235101eb8fd45fd5742725913e8b358464a6494b241624f2645631eb0faf0ed0152a5cd8f027340d47a0e87efc6b67b7df40bd68cabdcf3bbcac1af77a45b9514", 0xd0}, {&(0x7f0000005140)="083adc7df9f8ead5ee0209b10cb5752d2f395230f63c5ce2dbe940034194a796ed8227b74aee9d5c0333fe3735f9fcb308ed6a1d4bcb6e3e6ac5969c6028ed4b0607c684ebabfe73d4fa9515e35d4b2b3c80d3c38c6d2d631c58b9143c8eaaf01d69558960a3f47093a596040358db04ca87428a9d8779285fe9da26978dc073b164fe9cbb3c905a01dcf39ce19173fcb3", 0x91}, {&(0x7f0000005200)="52bb5c4a58e9d1cdcf03246ed53aafc99991b738591a00a4205e97d3f3344fa3a70e387821b056f6568b114203dbca6054aadcd26123f299", 0x38}, {&(0x7f0000005240)="cab622da2213d1e7ea23cece89e0d40ea0337e223fe0367fb23ba9baadf4c543ae34d717106de8ada997e58b1788a75e5eebe1182268367e33d58ed27b93c3dddf169925d7758b7c772ee1b0d98b56022f4016e0bf0d20c83198204f09bbf88e3dbdb509f8b880", 0x67}, {&(0x7f00000052c0)="c32d5730", 0x4}, {&(0x7f0000005300)="e5495b1abc6ae3f4eabb53d750a5a57243d1ab8c8c960b3cf04ad3cf009dd107bf40f94ef09b8f49fc68e0859e953519335237444ef1fe137973856bcf4254aa49e215edd98eab4ccf87ac2465bb5ad0f677c43293821ff5b8db0dd685be105d0973be9c93fcd305bef64a0fcd3ee5b5", 0x70}], 0x9, &(0x7f0000005440)=[{0x100, 0x117, 0x0, "016c56be1e584de5024fa352b53ea60702119f3c5d1d0d6de3baa0486d91c4ea7074117c25626192ecbe8399dc328d60f37cd865518c2b5920db6f8b34487f2558389123f1addb2dcd6f1906982435d287a0c6f681c0c47da864202fb0e5dad072b613ef3452231c73e2beea87f5988ce49d4d93d5c922225c470d94b7d14af9a8fae0e28a450b6cf85436134a1c1ee634eed95532a66846d6afb47c024ff5003a867463b4c769130434db1fc2d1094fddbc356d288842cb8585594abc6fde9976aedbe925c676a9490216cf889ece7989a346961eda44abf7173dc617e9fc58bbf9e4c2cb3a5a060aa0"}, {0x38, 0x11f, 0x5, "43975da7efc94551648e32929fb96bed59475b89a69ad7838ac9cbb29e18cc9e8fd2"}, {0x18, 0x10b, 0x4e, "e8"}], 0x150, 0x1}, 0xfffffffffffffffe}, {{&(0x7f00000055c0)=@generic={0x5, "aea00056c5ebd813c8a634eca083f00b85584050833c05e73bb7ee1b8b5e98e2c9d24b20182885368253a37e67373d6c36ca5766f4045e068db910d56d9a85d1cbb615a959a20e82b74e64c60f3d572fb7f99bb2f31aa2eb1b9e61a5c54593d9ba6d540f9ec40a85424f7de2b8de199d0d888b3cf4907c62bccf9b5c6052"}, 0x80, &(0x7f0000005640)=[{&(0x7f0000005700)="4ee8956394b61e799ac62ad727b36b91f21e7ff6644dc54427b9573f5fd3ff605388bd3896b26b1416bc8e6e9b8da4714f614596f75474864f7fa2229333b4a38f96acb0bdc75472f8fc9d", 0x4b}], 0x1, 0x0, 0x0, 0x40800}, 0x800000}], 0x7, 0x8000) sendmmsg$unix(r4, &(0x7f0000001cc0)=[{&(0x7f00000002c0)=@abs={0xdc6d8c7a57c27702, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001440)="404fade3253cc5df1361d25f4d6c0fe8003ac3e370f754915beef765c790fbaa0a9c314d972b5ebbb27cd6f4193d86a4f6bba9e036482627b4918d1918817f0a469e7534884357cca8b40578872e412e26b345bb4f048b09496fd46eaacb68bbe245dac5cba59b3cd637acf7758daa730d1214c2f5b06e5813c9efe9d6db596621d91562dbc420d6e61ea9605cef4e596bd7795470df6d78d97197b660a10b95285751d5011b72a01cba65fb8a1b5feaaeba6639984eed018f357a049c", 0xbd}, {&(0x7f0000001500)="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", 0xfd}, {&(0x7f0000001600)="2dae00b67a6385d6cb55fedcfac62acf6a2ad9e3718898944206a7d350bed2bd574529a8163214503aad50f62579bae7fc1c7b994db33082527030307d1184f450ee7f46e652cbdbf059a6dbed23f8999f43a3f4613bbccf051993790e41b253cd", 0x61}], 0x3, &(0x7f0000001680)=[@rights={0x28, 0x1, 0x1, [r8, r4, r7, r2, r2]}], 0x28, 0x2000c810}, {&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001740)="1f47cab081b81e0294d53acc6895b094efd6b23fcdab2b97e0c6e50cff452d3f590f395b3c2088a74a377a189deb7bc2a1b19a6be5436552b49ef2866ef79f05fa21836bd9", 0x45}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f0000001800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001880)="720681d842da2c0835cf9f7f112e4db59a693c1d48342e52dfdead618872cee7fe09b880a00ed43bc015787014f42fde1fedc5d0a283358c03ee454c4cb86a28245033acae2117c21ca3fd861281c8", 0x4f}, {&(0x7f0000001900)="e7ac851ac57c2473cd6e4fcfa2236e2a962c072de4dfffa9e67f7fa0b8dc80", 0x1f}, {&(0x7f0000001940)="df896ff6c54caefed35752948302a8834ac06b16dde218163da8418bb6f8030f", 0x20}], 0x3, &(0x7f00000019c0)=[@rights={0x20, 0x1, 0x1, [r0, r7, r2]}, @rights={0x20, 0x1, 0x1, [r7, r11, r0, r3]}, @rights={0x28, 0x1, 0x1, [r7, r10, r2, r9, r4]}], 0x68, 0x20000041}, {&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="8570220c267c8702cd53774b0d4ccd3092866788ca2f7b427d599afb356a20c5f2c86c73681892a76ff74702b0392ddf9c513152b727ad676bf317a4fdef9b92705b808baab8b09af0c274f0577061dd354a1ee67a9cd8995229d24c6ae3cf7b16578a5ab31a50b03034463c64f4766b317565ccaa90a3a2a64bb0a0c97dac5de1936478f88a5f800d0ab045e0e0697f2f36a990685a92e0b5234905556b0dda5c89e70958da209f2f1f866beb959b2ad5f9411d7e", 0xb5}, {&(0x7f0000001b80)="078b2e4951f87c3907ef2888417df9c3782a295fbd01591227e20db2e0b25630d8499afb80f5c786dcbdc2e8a4f9ee6a92d54c6990a9bccc64bd8feb833ec8808429d947ffcdde3b55a08ef09b3a7239de26242532896089c97935f5", 0x5c}, {&(0x7f0000001c00)="d4c0fde6", 0x4}], 0x3, &(0x7f0000001c80)=[@rights={0x20, 0x1, 0x1, [r1, r3, r0]}, @cred={0x20, 0x1, 0x2, r12, r5, r6}], 0x40, 0x1}], 0x4, 0x84) sendfile(r3, r11, &(0x7f000000a000), 0x7ffff) r13 = fcntl$getown(r2, 0x9) mq_notify(r11, &(0x7f0000000180)={0x0, 0x35, 0x0, @tid=r13}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40, 0x0) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$FICLONE(r7, 0x40049409, r10) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000005980)={0x7, 0x4000010001}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x5) ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) r2 = socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000000)=0x10001, 0x10) syz_open_procfs(r3, &(0x7f0000000300)="6e00002f75649ecd6974653680") sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) [ 414.868325] ISOFS: Unable to identify CD-ROM format. 03:33:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '\x00'}, &(0x7f0000000140)="f3776c616e316d696d655f74797065282d62646576245b63707573657473656c696e757823252d6b657972696e6700", 0x2f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) [ 414.901909] binder: 24851:24857 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:20 executing program 5: [ 414.961807] binder: 24851:24857 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:21 executing program 5: [ 415.007064] binder: 24851:24865 unknown command 82216657 [ 415.012581] binder: 24851:24865 ioctl c0306201 2000dfd0 returned -22 03:33:21 executing program 5: 03:33:21 executing program 5: [ 415.065349] IPVS: Creating netns size=2536 id=43 [ 415.072881] binder: 24851:24857 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 415.072889] binder: 24851:24857 unknown command 1704546753 [ 415.072898] binder: 24851:24857 ioctl c0306201 20000040 returned -22 03:33:21 executing program 7: 03:33:21 executing program 0: [ 415.073004] binder: 24851:24857 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 415.109453] ISOFS: Unable to identify CD-ROM format. 03:33:21 executing program 2: 03:33:21 executing program 6: 03:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xfffffebd, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r2) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000300)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106b080100000000000000"], 0x0, 0x0, &(0x7f0000000100)}) 03:33:21 executing program 7: 03:33:21 executing program 1: 03:33:21 executing program 0: 03:33:21 executing program 5: 03:33:21 executing program 6: 03:33:21 executing program 4: 03:33:21 executing program 7: 03:33:21 executing program 2: 03:33:21 executing program 4: 03:33:21 executing program 7: 03:33:21 executing program 5: 03:33:21 executing program 4: 03:33:21 executing program 0: 03:33:21 executing program 2: 03:33:21 executing program 7: [ 415.416966] binder: 24904:24909 Acquire 1 refcount change on invalid ref 0 ret -22 [ 415.484378] binder: 24904:24925 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 415.525380] binder: 24904:24909 unknown command 0 [ 415.538318] binder: 24904:24909 ioctl c0306201 20012000 returned -22 [ 415.546838] binder: 24904:24935 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 415.546846] binder: 24904:24935 unknown command 1704546753 [ 415.546853] binder: 24904:24935 ioctl c0306201 20000040 returned -22 [ 415.546931] binder: 24904:24935 unknown command 17328912 [ 415.546939] binder: 24904:24935 ioctl c0306201 20000180 returned -22 03:33:22 executing program 0: 03:33:22 executing program 6: 03:33:22 executing program 5: 03:33:22 executing program 4: 03:33:22 executing program 1: 03:33:22 executing program 2: 03:33:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:22 executing program 7: 03:33:22 executing program 0: 03:33:22 executing program 1: 03:33:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x5) ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) r2 = socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000000)=0x10001, 0x10) syz_open_procfs(r3, &(0x7f0000000300)="6e00002f75649ecd6974653680") sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) 03:33:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close(r0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x4000) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0x6e) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x40, &(0x7f0000000640)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000300)={{0x84, @loopback, 0x0, 0x1, 'sed\x00', 0x8, 0x6c4e, 0x70}, {@empty, 0x4e24, 0x0, 0x8, 0x0, 0x8}}, 0x44) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000003c0)=""/209) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000100000000000004b000000"], &(0x7f0000000140)=0x1) syz_read_part_table(0xffffffff00000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000), 0x0, 0x1a0}]) 03:33:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close(r0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x4000) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0x6e) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x40, &(0x7f0000000640)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000300)={{0x84, @loopback, 0x0, 0x1, 'sed\x00', 0x8, 0x6c4e, 0x70}, {@empty, 0x4e24, 0x0, 0x8, 0x0, 0x8}}, 0x44) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000003c0)=""/209) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000100000000000004b000000"], &(0x7f0000000140)=0x1) syz_read_part_table(0xffffffff00000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000), 0x0, 0x1a0}]) 03:33:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2810000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, r3, 0x806, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x20048080) 03:33:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r2 = dup(r0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0xfff, 0x401, 0x1, 0x3}, {0x2, 0x9, 0x9, 0x400}, {0x3, 0x80000000, 0x4, 0x2800000000000}]}, 0x10) sendmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000002000)}}], 0x2, 0x0) r3 = dup(r0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000040)) 03:33:22 executing program 1: r0 = socket$inet6(0xa, 0x8080a, 0x8) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x840, 0x0) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000200)={0x102c, 0x7fff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000997835fb811b392e2bef9a1709609f9fef35e7ded5dd8b3814ddc5b56ee77e06fdd59472a83b9fea9f4d114a460abd12093d12e72b39a35155021aa43955a2f23944136c1cc9f02447051f4db0533e0c399727e04de15b52ae80ab3920e728416ee74f6adc6", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 03:33:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) fcntl$setstatus(r2, 0x4, 0x42000) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000001c0)) sendmmsg(r2, &(0x7f00000002c0), 0x400000000000174, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) 03:33:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80001, 0x0) write$P9_RAUTH(r4, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x3, 0x5}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r5, 0xa, 0x12) ioctl$TIOCNOTTY(r2, 0x5422) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) dup2(r5, r6) fcntl$setown(r6, 0x8, r1) tkill(r1, 0x16) [ 416.318801] binder: 24945:24964 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:22 executing program 2: capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000380)="35c8aebfc924", &(0x7f00000003c0)=""/130, 0x0, 0x0, 0x0, &(0x7f0000000480)}) [ 416.391573] binder: 24945:24983 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x80001}, 0x7) [ 416.391673] binder: 24945:24983 ioctl 4b31 20000300 returned -22 03:33:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x18, 0x100000008010022, r0, &(0x7f00000001c0)='./file0/file0\x00') creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 416.436549] IPVS: Creating netns size=2536 id=44 03:33:22 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0xffffffffffffffff, 0x0, 0x80ce67) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x0, 0x13, 0x0, {0x3}}, 0x1de) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="0beac676a60d1c70282f16e4e653c998e1534ccbf6028240b07203ed9658e5c5062ef3c3fadcd808256e69c72203a61907a3593c98af7927e270c4a976714e5ea5da1333500d6e8dac9d206ea460ba80e4d55ab2ac67c717f92796dbbbdb1c54b7d1afe6e8774920983d7b75e0a56b", 0x6f}, {&(0x7f0000000340)="180b09e8df421b6772d1554e2382335a69290c4b181416a35a0bcc2ff1f94f8756741850da936ca1dcc0b9c4afc31f3b2f4ec2d2fae2b05744be2e16eae79ca041019ae26b89cad4f8b69f06c4bf9a0024a90f061a8cc5b456c0fafb20da7fc8dc55128314c6aafaebb32962d5f45073247b4c61f8751552c55e1c2a83d63acecac1698ab2106f270710051945450ac8514b1c19b3fc99849be393c526b78c1ac09902a14b935aa46b4cb4996c368e6bcf9a8e19eed7cf61163e8a0c4c46e20cc285fe5739f93a262ad02a3eebd41d108f31", 0xd2}, {&(0x7f0000000440)="a87b47fe85ebb5d5a26a38c087f0493beb4c823511f94a5dc078babab0d189928164a720499dc928c07c70fa55609a4b6396defaa334b46c7a1e81344cf38bd2e54f2ca26625bcef66268f30882cc9b5ad", 0x51}, {&(0x7f00000004c0)="801e68f191d8494afe13240c1f61f194efd709a748415556e505e15d6d9494e9fd8c39a05cb8a69df501de887def8f34ca78b59e019d9e28b403d706e95d804f652af91666eca378ac4dd9a76b08a99e2c9f1dac70ade8b6de3a7deaacfe4ac8cae77dd0211ef7b61b3c2a14306886d3f44b78ee9dc634b9bdb9408551f15e7b422b7b177a6e9340b641837ebf307af30b0a70a1c81e46d53f5cbf885219415960e416cfcbfdb61ffe2d74d9c2dd0dbb5814eb21351a66810206a8efe0956c4ec27594f9021112762287fd9656575b75b14cf5e09e27585a0d077cc88c15c2151a243734210d86829fee195a77246bbb4c636b57b7139426248d898b3b4c0c329c670f9c2d3ec5cc6a44bb7cd6233b381ea18c0d524c592e1f59c6d073e779eabb85b3c58265950c2895eccad5b6b52c2679011945c89b79b5010ac668c00bf6a79ccd03c183d1f891dd10221efe7323a971f62808603c2bce21662a82fe754b7aed59e25b34cc24e52dfd50e58eaea20d881693bb08ba98f71cd60c7fba335acbabea7fb25d6034de66c8469fddb613d20226763755ed5b1d0b54069385da74debf34d276bd6fb9fabaa82181c72e941ebe004153a23785eabf97fe8cd24d35c2691904667b242ed34e22c2a2dc2ef1e9a6095a20ba9d2d37bc899fe1eab100e0fe018e4dd4b5c429a79595b763e5232b58af438168f0934424ec7094715f92e51c8daa438c31a5b55539da33b6940ab8881de43e987686535a8df66822a6704a18ebeacdcb0613def1e25852d88e9a33594edb86fed68f628830372d6b94afd05b2d6e946449d0c6a98dddabb8ecad5dcd58bd6ae8120180bda6c6d0ab7ff4421262880151aa3a3ef32d858c739264238494a123b08bb12ac78b6ae47978ac2e4629724c62a6af99d5a553fc0eeffdd3804aeb1d50851538b56db2a41f2c1c3dcb198c63dbcd9aa9f6b3bf0f3c240714fb6ba57f5e734df477a5551fcb90f87c9c8f225f4b5852c114d3c86613a641803b57b7cb9a35e1e813d374b40158701d64bd84c8b4fb546eba3a49cf5cddbd0b519fc9ad93aaf520e930e7aff9bc450741287b403788eec0b8feaf4ea22cb7a6d13dc3c4a90d33ab5e441a6fa00457804c821ff6510e990d51f0e34ec49857bd3ff989112625141a5bba6e6d14eda8bf6a8d70e90c80757e7ce3a75c9927e0123bb3e581288a6d5d5034c82ab7eb89146c6986fb2fb57c453c3a7ce90be49e95cf1fb5d45a7fca9304c3a06c055d4eead6491607b8bdb347169260209aa69f262f5f6f3be8dc5bb0a49c0d140705979aa0840c6fee4817f349d88cb11843d68d34f421ec9f069cbb0f2135be84889ff46dddc6d94c83587bf1c78be4ce6d9e8192304b2a1ae3506f97205282996e71ed6aba09142ccf1348b15a72516a142a7343daf4d9b60f185fc2c1cdcfaad1bb7c3f2315861c4da4b0c90ab2afde8ddb0307827b1d78bd72ae57b78b819bd7ee20c0d6a43ee9d8e181ce20e7f79e91edfd8aa6a3da947e455597f0d2cd00c47856bece465ec7ea4fbcb0f071d2523718016eae0fd9da9fc59a6aed7819bb2b0dfda0e6f672b2cd40c3972b677ebfc2a3123251a81e72b508d7d232a29f907c2eb680b9ed80db6e5ebb765d1578fba091a738b2cf14dd48203b774ebfccb44a76fb549df4d484b8a3053d8247c500b56264f25eeff481f0c9d4990fa937300c85e8f0bcf57396d9458fe895ada851e9ac24880f017765feae20065cac055c7a9ce4ab057cadd1ca7c2614eb1d61719741f23756d8599a4108c9b664fe927e8751f58ccf3ed0a750b90f1382d00af4b1e5b7e8e4a374f96a411b551f297d40d70977932ae2c776cb7e8681201d9f27dc57297777a13e73cbc0f45542d4e9500eaf51ba0e6f57d5e8edff8fe0c02eabbecfc9f5887bda08bc0b39ec98a06a8e983e5929e9ef4761c9607e98193b1a4573d1de3b63ab9f7fe6799e08b19a08821642ef945148f92d0bc259c7b6816637e83a6db00aca13a6ef89b976e5ca2965a45ffc35a99cdc9552c69c1f1faa58f3955cb1ae391f1d5ef116f33906acffb18acacfce79591eaafe35050f16f9b51bcea15408a5904ff3606d49528902b2069fd3826d9f16ba351845c4b2667d46abfca1cb441a40658a2d7a21c2220024670831e27743c5c6a2b13451a2421517d5551585eaaebcddd6430cc9304840559293a65295afbeeff752e533e3e103f7ebde599ca7de55fcaac73a16a7d4a2b70d99cac2e4818ccd0d8714724ec7943ffd7a82f22cafe82567ed48afc05cb06bff673b0eed0a0e9827ad6cd5439e487ef8699b46dca5066704d377b835249bd6f1349391b4dfa19477606847bff0a9389a7013cd96382bdc777360594a9984822bb03ef83cf66991fef6ab39aae7b71d617da5cdaa4582767b5aec318a973866830093fd98a4abd1ea9fb5ad1ea1846bc2549cfc217697ccd4b2d50838b1b689314985220ef5266bbe521ce3a66801fd5397470c353db3f4035554bd137232329021f7f56938eec41d2d32b8a30ae801d9c96d2440663847b66b85ce614b7a46235b3d0641df2252b61bd3f55eddf1923f3eb82e62962623eda573eb9090e65f7288c204a1248b26c626ed4f02c535134f4f8c0118bcda260f1650cad74d5a13c64f700fc26a80907620fd5b329167a41de41e23f3907e070269c9c2f46c1c885602e02e70be6c7d33825af9d853c3c2b3485d0b09561e15603855bd8a93d9f94749c2cedc058f01c56572f03a0bc82f40fa7a3381b8d1724e092f98d24a5245b5a0d7cfb69a8ce340dbd9854ac5b27ed955dfce6043442bb8643ebd5fb9a907820544314d696fc5d7960c9dbfb918ee726bb7352dd809cc5a470c93c9719267a1b2937db5d1194947caf273ddbeca26c7edd3a52e88554db633206bbe4f09998ba4993b9d9a85e246ec7095e55b009515c5b046abd22f15b32465257e6090f73212c125cd79515b3b336a25520dd6915b1353071ee18916534148af7102e99c1c81310344de837dd74467f20ded643069dcd55bbd7e4756d382e92da473e7fa38c337b4d2b180765ae89daca3f7640866af9e880cc5bb16446d9902ce7a0bd05c7d0a428c95242b9c74aba3851fd2d774ca3bef7ec42bf7ee0d15334dea77c7967b09683d8f50f81fbadf72371ac94baf51e7b474bd0191b7b7940eaae69ca3b26de794ae02d8bc8c20acfdae08f2447796d2da6a7945e73838f05637433b449fb064f32c966907c20681b67a808ff3e547803ec2374895a434fb7c0b16244e275beb6c49da5a40ec6be13f0d43bbcbed28a0bbb1356659941cf5a9479be432df9be8be3bd23ded68d0080c8e805de38f791ff763816d54b18ff07e97843f67b35308bd400da6a74385faebba5903c36689a6716a7c263ae95d12c93e8733888ba6e2173ae0d1fe72a678480b96052639f0f29a4bf9d46d1ccdd42d3c8a57d79029b340ac98ec813d31bd9bc7048e5b20e87f23ff67bb3342ec3e82f1e0339926e5d9fe59fe54a117eb6947c5b48f94acb59efdf8bc975362e87dd3df54a21f4d90805872e13b341412b16c616da94fec1079f0eacc1738f4e2de379087013a8d3a64aee0f97a0b4cab292a62ff737b3f1ae3e5acfd08b811f19e5301cdc64594bd1636d84e1b89717dba4642bd94fea4062a4baf8e0612a52a2940f8b74a3dd03159ee2421fa3eefa0b9b462608a579e96d01596459e98357463d17e20e8ff9623f6d4c87dcbb41ea403ce3c62ab075587f83745955a5cdb64f1b93ac3f28f6700c4430bf05f6c265af2f7243e1c494d3ced8ee96af58423d8ccf6a89b8e3739fa16c0139c550fa186f3263a131cb3eae430d22235ae3fc385e12e9db1a1aadc51ecc30182e59277a9df4b6f55109c76fb40977ca155282401190ebaacaec758e46a71ae7932f13bff9521cb445c09ceec188d1d2ef77fa2ad147fe66c3e05cdf75206850ef8b4ac9f856456635e7504c929e3730cf0691961df7615d9c709f648822175fcf62773f064d66dcb1975977b718bf4dae0d340058b642cde61466c8b9ad84e874a93335127d748ebfbc2d4a30cc3686a093376dff7f1f89ea42907038afdab004c619eb62bde510d14cd471662b90c11136fe919200fe461b1d26241f342129fd646c8bca3fefcf68fdfb708bb76797249f3881c0339930970fbe436fa286026585e552be45b77067f1db158f17a4180f0069f92058aab7a7bd006f3a271dfc8dcf2c4bd719c88a174083482c3574028bccef08a731dd2a3dd9c4358127a774da0c7cf9c4924a5c0d2e7b84a7eb56a82e64ebf0f2dd1ac221bed33822cc5260aaf35b16048dc8374c75eee4c1a526e41423aa1eb2277448afc855adec782e1c8ad085582a9a42aa46e73bf95467bdd0c4f580ff0c4432a10ea670618d3e46c2f0ff4e5f271edd1d52e4d57e57c84a566c03e751188b85f4a2588fc3851ecbde37556de9f0a5af06b19e343eae836fbb3b85e523d0a2dac1753a88b5d4c3a08289a84eda36063cc795f55d88d8ca2d019b27b71f1fc9cb54734601111f6e09773b0399442d065991d600f91b54b916dffbf8dd2b9fc627b5f061540a82dbaf70d350faaa36041ed5681d157ff2be7073925b756b576ab5f7a30dc08f9c6cf479f94e328e281975cefec2bd830e7fbe56dd2c3a09c93f2c033f80ce2ce0a9152bf9288d5b23668e5c8d606d264544efad54972bb938ee68d241fa4b0db101cd453d3bae4803791cc542672809b76442436f0d20a6f916450d96cc6582906f4f410fe8b58a4128f87871ab9531fa5f11264afb2a1fa71585a10dbfc45a9eb02939d1a6cdefb75df1bbec02a52251cc4f9ae4c8eb8bd161f34b775102cc60c5e33f1db2c4fb71378f8c58dea24fce94115e8fbdb8a79078c422dbfcce17365db2a1aade5cd99c94588b00a08031dd45e4aa1a727198c33c9033d4767121cb2f692ba605e44fe974e70902d4d2ba2613acc0a7d1f29cbb244a39f28e4124a413d87dd80ed74fab473a2ef5ae7e4c46f3f4191931dff2b1c15a1cdead061d25947223dcb27ef84f70bf84050a964d4484c1243c5321ada3de1e26098dcf974d53317d7c70e302c2f1788022c5427733350449121c444579e0934aaf06acb9315ed91c5fec06f5394362523c12410d6df7177db5ebd9b8576beb2a3754d3b80e4ccfbc29a6012ead6f5cd226eca4860fb5943d6d7bb580172b96917431b091aa8fd8ca7b7a211616141c4a22b34a67241e96a834aea1c13fa3e88e22d9402f7e1557024dce0cdfc67d962717b16b15ef70b41ea5923f656512990ae390641540a9241c0f785c723e724341d218b52fb53adaa4b19b39b4f2b4466c338b8aa78dd6962668f6ac2892f7fbe02f500719fed11573959f1df719669bbd64f6bf8dba507b3f2ca2760d090b53201dc7c85ad64c747e2cb9ee1ece7736bfe559151928f4059485270d67a1c2a376332f0db245cdc6d3c8f1dc4a7d88f91b9df354ded427af0d9754aa6c6effaf920d6c89ab28ffa5b64899e5c024554691d2fa4f31b6832300a63346fd1ed5b8788a948b18fcfdfa1453555f4a1d1641aedc71ea6587cd0ac1790bc3c8f923f0e908ac4b67f5ecd347d79c112a2c6b21a3069835eac6735f9690ea28f2fa382c5a39b80b3a8e9f4ba20d67eda3f54c1e93e6dc0c09d608ba85b57381f6c356ce750d88b2c5d1903418e4faf42dd431bdca92e4d515e59869f8577686aafc7230af4ad5cb594baf3515d421ae4ca1671ac7dcfd773d77a", 0x1000}], 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x3ff, 0x800, 0x7, 0x0, 0x0, [{r1, 0x0, 0x728}, {r0, 0x0, 0xe6}, {r1, 0x0, 0x352}, {r1, 0x0, 0xdda}, {r0, 0x0, 0xd0}, {r0, 0x0, 0x3}, {r0, 0x0, 0x59}]}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'team_slave_0\x00', @ifru_hwaddr=@local}}) [ 416.494775] binder: 24945:25002 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 416.494798] binder: 24945:25002 unknown command 1704546753 [ 416.494807] binder: 24945:25002 ioctl c0306201 20000040 returned -22 [ 416.495064] binder: 24945:25002 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 416.636346] ISOFS: Unable to identify CD-ROM format. [ 416.651399] ISOFS: Unable to identify CD-ROM format. 03:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x8, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x10}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x940, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'ip6gre0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'veth0_to_bond\x00', 0x5}) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) 03:33:23 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0xeb8c, &(0x7f00000001c0), 0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) 03:33:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getpid() epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) sendto$inet(r0, &(0x7f0000000300)="793b5703984b8134b2cc5b4bd7677b3c88bfbfc95f48443b1d62e4baed290417781b7a7eeca1c4fabc2d840c83f77575c2db90c8e3f1389bf40d3e94bac694793c677b75f63d7d0facb2d0bc1f65a2bd86c3e6b76853658123b85a664641ee91d9a9c162cedbd513da99c7eafefa5658cc6df092323de814a6d9ebd6dc557a5a3d1ddf105826aa2806ed56263af0d6019874e4b65480e969b13522e45708b520bcf6a3", 0xa3, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') shutdown(r0, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x12800, 0x0) symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00') recvmsg(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f0000002900)=@xdp, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000003a80)=""/155, 0x9b}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000002780)={'nat\x00', 0x0, 0x0, 0x1f, [], 0x0, &(0x7f00000001c0), &(0x7f0000002740)=""/31}, &(0x7f0000002800)=0x78) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x40, {{0x2, 0x4e22, @loopback}}}, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000001300)={0xfffffffffffffffe, {{0x2, 0x0, @local}}}, 0xffffffffffffff4b) 03:33:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4000000686, 0x0) 03:33:23 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) pipe2$9p(&(0x7f0000000080), 0x4800) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3}, 0x90) 03:33:23 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2002, 0x0) close(r0) 03:33:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x800000005649b094, 0xa200) ioctl$KDDISABIO(r0, 0x4b37) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x2) 03:33:23 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[@ANYBLOB="ffe3abe650c6dc7236c3c5ea7fffff00000000"]) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x100000001, 0x5, 0x3f}) 03:33:23 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x400000003, 0x3e, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000001880)) r1 = dup2(r0, r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x40000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c700bf2956679", @ANYRESHEX=r0, @ANYBLOB=',access=client,nodevmap,\x00']) 03:33:23 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3f) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@local, @in=@rand_addr}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf00", 0x1f) 03:33:23 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x3a, &(0x7f0000000380)={0x6, {0x2}, 0x80000002, 0xc5fd}, &(0x7f00000007c0), 0x8, &(0x7f0000000800)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000004c0)={0x2, 'team_slave_1\x00'}, 0x18) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x1, 0x0) timerfd_create(0x7, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000780)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x0, 0x0, 0x200}) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e20, @local}}, 0xffff, 0xab2, 0x68f, "5947cc9eb361ec7ca9c4ff614c44370de8a2b3578bf7ca8b06594a3be5f7e5d47cc97442487da7813061ca6f743d101baf7382029adc035278c81123b310e76a2025ad28c73fbfc22072280e450930dc"}, 0xd8) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000580), 0x0, 0xffffffffffffffff) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) fremovexattr(r0, &(0x7f0000000340)=@known='security.capability\x00') recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000580)=""/210, 0xd2, 0x0, 0x0, 0x0) [ 417.070711] binder: 25026:25027 Acquire 1 refcount change on invalid ref 0 ret -22 [ 417.093521] binder: 25026:25027 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:23 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendto$inet(r0, &(0x7f0000000040)="af25f8d735da0c36754a3a44a5a29a354166ea1dcd4445e3cc0f26", 0x1b, 0x20000000, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000100a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b04000000", 0x3e}], 0x1}, 0x0) readahead(r0, 0x1ff, 0x4) [ 417.159088] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 417.193376] binder: 25026:25059 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:23 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r2, 0x1, 0x0, 0x10000101) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) getpgid(0xffffffffffffffff) fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) dup(r0) getpid() r3 = gettid() getpgid(r3) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'ip6gre0\x00'}, 0x18) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/4096, &(0x7f0000000280)=0x1000) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000480)="00eb0c432d0174df5f00", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) alarm(0xfffffffffffff1b7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 417.205622] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 417.233437] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 417.244808] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="636f6d6d00ca721550fb1c58844dc6b4bd118556517655b13ed71e24e90402000fcaec18e2b5ac986cb49db0d9fc60f4ebcb19b5204c088c6f39d8e49038076c4e34fe980745654bd33846652fe77b14a2534e7ed1b0714218cc45e7792eb68eb287fc094c231275c198e0f375d5301019e6ff31dacb5ea9c415446924a0abbee419135d4cda0c75da060fb22bd4100d2547d521a84efe") sendfile(r0, r0, &(0x7f0000000100)=0xfffffffffffffffc, 0x10001) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @broadcast}, 0x232, 0x3, 0x5, 0x7, 0x6, 0x0, 0x3, 0x5, 0x80000000}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) 03:33:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) tgkill(0x0, r1, 0x3a) fchdir(r0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) getpgrp(0x0) dup2(r2, r2) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x97) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) [ 417.328483] FAT-fs (loop0): bogus number of reserved sectors [ 417.344624] FAT-fs (loop0): Can't find a valid FAT filesystem 03:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="692ef709481f11"], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:23 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x3, 'syzkaller0\x00', 0x1}, 0x18) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x200) unshare(0x40020000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) epoll_create1(0x80000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000700)={'mangle\x00'}, &(0x7f0000000140)=0x58d56019b6cf755e) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000003c0)={0x4ab1a9bb, {{0xa, 0x4e23, 0x100000000, @mcast2, 0x3ff}}, {{0xa, 0x4e22, 0x6b29, @dev={0xfe, 0x80, [], 0x15}, 0x8}}}, 0x108) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000640)={'filter\x00'}, &(0x7f00000006c0)=0x54) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000540), 0x4) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000002c0)=0x54) openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x802, 0x0) 03:33:23 executing program 1: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f80), &(0x7f0000002fc0)=0xc) setresuid(0x0, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x0, 0x200000000082) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0xffffffffffffffab}) pwritev(r1, &(0x7f0000000340), 0x0, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000002b00), 0x2000005) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580), &(0x7f00000006c0)=0x14) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000740)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x0, @empty, 0x0, 0x1, 'dh\x00'}, 0x2c) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) inotify_init() ftruncate(0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:33:23 executing program 6: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) write$selinux_access(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797374656d5f753a5d626a6563745f723a636f6e736f7248229565636f6e66696e656420303030303030303030303030303030303030303000"], 0x46) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x5612, 0x0, 0x19, 0x0, "a04caeac0e5aa40eb75d5a7dea7a4204b2f5f22195f365cad379befe7785d9c29f487b9fb3b6d17794cc151a432c008f7375a302b3bb9625d4b33eb1624ec685", "e441db7501f40018acf0c11f749a595c417fa75e0cc3af3874452c09a243c26e", [0x7, 0x8000]}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r2, r3, r4}, 0xc) fcntl$getflags(0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x181000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) pread64(r5, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r5) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000643ff8)='./file0\x00', 0x0) r8 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000040)={0x2, 0x401, 0xffffffff, 0x9, 0x101, 0x3, 0xc84, 0x3f, 0x7fffffff, 0x100, 0x6b, 0x4}) r9 = openat(r8, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f00000002c0)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r9, &(0x7f000001fff8)='./file0\x00') 03:33:23 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/187, &(0x7f0000000100)=0xbb) [ 417.900444] binder: 25090:25093 Acquire 1 refcount change on invalid ref 0 ret -22 [ 417.938672] binder: 25090:25093 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:23 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000400)={0xfd, 0x0, 0x0, "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"}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 03:33:23 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = open(&(0x7f0000000380)='./file0\x00', 0x240000, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x5612, 0x7, 0x19, 0x0, "a04caeac0e5aa40eb75d5a7dea7a4204b2f5f22195f365cad379befe7785d9c29f487b9fb3b6d17794cc151a432c008f7375a302b3bb9625d4b33eb1624ec685", "e441db7501f40018acf0c11f749a595c417fa75e0cc3af3874452c09a243c26e"}) socket$packet(0x11, 0x0, 0x300) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000440)="f798494ae8e0e450025309e90caf551040a52d458d836a735a8a628b1c0982b857b7e77b78a6577890d7a0638a486f1e9b8667addd32195ab2fa7e3fc69c37500d21d6f3c15f827e048ea9be132b6864271bd14cd6361b18cffffe8ed1c8d286b5deef0161626b9321a46b133bf1b1970e78d9cba7029686") r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x181000, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc0185879, 0x20000001) request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000780)='[\x00', 0xfffffffffffffff8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) 03:33:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0xd, 0x20, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x4]}, 0x45c) 03:33:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x24, &(0x7f00000000c0)="8e4c942c0d4c4a3aa9476d9ee4", 0xfd2a) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x4}, 0x2e9) [ 417.954481] binder: 25090:25093 unknown command 167194217 [ 417.967930] binder: 25090:25093 ioctl c0306201 2000dfd0 returned -22 03:33:24 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0xffffffffffffffff}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x0, @loopback, 0x8}}}, 0x3a) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000001c0)=0xfffffffffffff58e) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0xfffffffffffffffe, 0x9, 0x8001, 0xfffffffffffffffc}) rt_sigpending(&(0x7f0000000340), 0x8) fstatfs(r1, &(0x7f00000003c0)=""/82) fstat(0xffffffffffffffff, &(0x7f0000000800)) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000700)=0xfffffffffffffcf0) lstat(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)) getgid() mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) 03:33:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000340)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) [ 418.049287] binder: 25090:25093 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 418.057699] IPVS: Creating netns size=2536 id=45 03:33:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa000000d}) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0) [ 418.063034] binder: 25090:25093 unknown command 1704546753 [ 418.063045] binder: 25090:25093 ioctl c0306201 20000040 returned -22 03:33:24 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) r1 = dup(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r3, &(0x7f0000000140)="61f0daa9fe319d109b03b533064f70577491d6853b7f", 0x16) fanotify_mark(r1, 0x4, 0x20008, r2, &(0x7f0000000040)='./file0\x00') ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000080)="766e07380579b5a4a2536345c585e9956d65c32118dfd0da77") 03:33:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000140)=@alg, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/49}, {&(0x7f0000000340)=""/4096}, {&(0x7f00000001c0)=""/125}], 0x0, &(0x7f0000001340)=""/228, 0x0, 0x6f85}}, {{&(0x7f0000000280)=@l2, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/107}], 0x0, &(0x7f0000001500)=""/98, 0x0, 0x1}, 0x1}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001580)=""/4096}, {&(0x7f0000002580)=""/46}], 0x0, &(0x7f0000002600)=""/203, 0x0, 0x6}, 0x5}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002700)=""/48}], 0x0, &(0x7f0000002780)=""/173, 0x0, 0x1}, 0x80000000}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002840)=""/213}, {&(0x7f0000002940)=""/29}], 0x0, &(0x7f00000029c0)=""/230}, 0x7}], 0x1ce, 0x44000102, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x40, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x8002, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) 03:33:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x100, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x1000000000}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4008202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x15c, 0x26, 0x100, 0x70bd26, 0x25dfdbfd, {0xf}, [@nested={0x148, 0x3, [@generic="06652777210c229d14a078d24272f66e8e4028f0484bbd917585752865507567a73fd68002c5be996847272fe27d", @generic="b07ab8fc21084038ea02ae004499c191d044b25c26adb3fa1c7d25b16bf6fdd3fea52b67f5", @generic="45ece2a8550664f0e627525f27cc2444085dbbdb7a363efa490649153f58aa999a5f0ea2e9ce8233", @generic="e5b83bd2ab5c7f35cf466ddeebed22688dfc548a9d91c7ecab2c7103f019038d26826f08ea549d6aa6d74240d27458a0474b288151e232d78b2243483618a5c1b3c274bd28252393700769dd3eea076a0550cbe60e35a85d06c07c67232d88698ca93d05b754a3cb6468f9215dbfa086ac3d020179ed52d66e89a19e3a28135d80891f285c7a11f5871c872abaf653da9330eea7226b89493fe3302b68795f94f03be8c79df6dcbcbbb19b305e447f7dfb1293b7ff1e577780b0e8d95c88d87aee527173c0bdd1c5"]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x804}, 0x40000c0) gettid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000640)='net/ip_vs\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) [ 418.067010] binder: 25090:25093 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 418.088142] input: syz1 as /devices/virtual/input/input35 [ 418.123278] binder: 25130:25132 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 418.131967] FAT-fs (loop0): bogus number of reserved sectors [ 418.131971] FAT-fs (loop0): Can't find a valid FAT filesystem [ 418.181775] binder: 25130:25142 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:24 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0xffffffffffffffff}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x0, @loopback, 0x8}}}, 0x3a) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000dc0)=ANY=[@ANYBLOB="6600f7643a51dda0bc8b000000000008000000002c90301900320000005a4fbf6b1cbe93922eefbbcd3cb1223fe59a3e635ffbc26b19b2870040bffff757088b3ee9e703440182fd1777e140c343b9113fdd2ff38bc69075000010000000a8db8ee10964e934cf322c789b9a9c145ee09370e71f22d0e50f01333b0680db637ede3cdf645f33ed9b81d07cdee548a90bdce430b70e3545e41b0100bbfe257adfa50da2a6a225b372f641ac0ab46d90a332cd6aa568a77114194259a6f392ee9a4a47049303ad6cf4ce6a4355a0f94766c313a930e56af3ac78d38c04dad72ee6b7e80d0bf8c5fac116e57b926c583f3163db7deacb715775490de329cb9c7ecea161f34b969e766c88a11e6351da470b6f38cd6e94c74817cc04c0df794619f0d9384ff3f7604a2256b604b76f90823b62a68fbf60f3d32e3b458240d948f8107753660f2f312bcdd5dbb74edac996742ac515cffde85592b76d596687ef752eb47d715a3bd2968aad48b84619111c007cd87bcd4c45363b6f385b2aef3c9baeb91c0d65269f7f40378d72de17bf577c164c6478aaf785cd8731d2fe4c37b263756eb8addbba38b0bb3513a87032bad3560ddd00cdfcff00c675c658b8de079e63a02bafb7f08bb633773ab41b3d5594703bbf3501e64a645bc75025ac386763d93338ce7d7a3f9ecdd7cbf8937f13d16ea85485362844959f0169313bfb9c8996f91ba5094e12d6b96a522d069211dc"], &(0x7f0000000200)=0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000001c0)=0xfffffffffffff58e) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0xfffffffffffffffe, 0x9, 0x8001, 0xfffffffffffffffc}) rt_sigpending(&(0x7f0000000340), 0x8) fstatfs(r1, &(0x7f00000003c0)=""/82) fstat(0xffffffffffffffff, &(0x7f0000000800)) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000700)=0xfffffffffffffcf0) lstat(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)) getgid() mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) [ 418.264461] binder: 25130:25148 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 418.264469] binder: 25130:25148 unknown command 1704546753 [ 418.264478] binder: 25130:25148 ioctl c0306201 20000040 returned -22 [ 418.264910] binder: 25130:25148 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 418.757046] pktgen: kernel_thread() failed for cpu 0 [ 418.762207] pktgen: Cannot create thread for cpu 0 (-4) [ 418.767650] pktgen: kernel_thread() failed for cpu 1 [ 418.772757] pktgen: Cannot create thread for cpu 1 (-4) [ 418.778143] pktgen: Initialization failed for all threads 03:33:24 executing program 2: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) write$selinux_access(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797374656d5f753a5d626a6563745f723a636f6e736f7248229565636f6e66696e656420303030303030303030303030303030303030303000"], 0x46) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x5612, 0x0, 0x19, 0x0, "a04caeac0e5aa40eb75d5a7dea7a4204b2f5f22195f365cad379befe7785d9c29f487b9fb3b6d17794cc151a432c008f7375a302b3bb9625d4b33eb1624ec685", "e441db7501f40018acf0c11f749a595c417fa75e0cc3af3874452c09a243c26e", [0x7, 0x8000]}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r2, r3, r4}, 0xc) fcntl$getflags(0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x181000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) pread64(r5, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r5) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000643ff8)='./file0\x00', 0x0) r8 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000040)={0x2, 0x401, 0xffffffff, 0x9, 0x101, 0x3, 0xc84, 0x3f, 0x7fffffff, 0x100, 0x6b, 0x4}) r9 = openat(r8, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f00000002c0)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r9, &(0x7f000001fff8)='./file0\x00') 03:33:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) setresuid(r3, r4, r5) splice(r2, &(0x7f0000000440), r1, &(0x7f0000000500), 0x40000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000640)) 03:33:24 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x2034afa5}], 0x1, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) 03:33:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x88, 0x1, &(0x7f00006cdffb), 0x138) 03:33:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xee) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ioprio_get$pid(0x1, r3) 03:33:24 executing program 6: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) write$selinux_access(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797374656d5f753a5d626a6563745f723a636f6e736f7248229565636f6e66696e656420303030303030303030303030303030303030303000"], 0x46) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x5612, 0x0, 0x19, 0x0, "a04caeac0e5aa40eb75d5a7dea7a4204b2f5f22195f365cad379befe7785d9c29f487b9fb3b6d17794cc151a432c008f7375a302b3bb9625d4b33eb1624ec685", "e441db7501f40018acf0c11f749a595c417fa75e0cc3af3874452c09a243c26e", [0x7, 0x8000]}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r2, r3, r4}, 0xc) fcntl$getflags(0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x181000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) pread64(r5, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r5) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000643ff8)='./file0\x00', 0x0) r8 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000040)={0x2, 0x401, 0xffffffff, 0x9, 0x101, 0x3, 0xc84, 0x3f, 0x7fffffff, 0x100, 0x6b, 0x4}) r9 = openat(r8, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f00000002c0)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r9, &(0x7f000001fff8)='./file0\x00') 03:33:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/udplite\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2022}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@polexpire={0xd0, 0x1b, 0x0, 0x70bd2a, 0x25dfdbff, {{{@in6=@mcast1, @in=@loopback, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0xa0, 0x3c, r1, r2}, {0x10000, 0x3, 0xba, 0x8, 0x7f, 0xbe5, 0xffff, 0x8}, {0x6, 0x20, 0xffffffffffff7fff, 0x9}, 0xb86, 0x6e6bbe, 0x1, 0x0, 0x3, 0x2}, 0x400}, [@replay_val={0x10, 0xa, {0x70bd2d, 0x70bd27, 0x91}}]}, 0xd0}}, 0x24040040) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) syncfs(r0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20}, 0x1c) 03:33:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sigaltstack(&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) flock(r1, 0x5) socketpair(0x1f, 0xa, 0xffffffffffffff80, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$getflags(r1, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) [ 419.009546] binder: 25183:25192 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:25 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x208200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 03:33:25 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x1000002) write$binfmt_misc(r2, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x4ad) r3 = getuid() r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x8004800}, 0xc, &(0x7f00000016c0)=[{&(0x7f0000000100)={0x2c, 0x1f, 0x120, 0x70bd28, 0x25dfdbff, "", [@nested={0x14, 0x13, [@typed={0x8, 0x3, @str='\x00'}, @typed={0x8, 0x86, @uid=r3}]}, @typed={0x8, 0x94, @fd=r1}]}, 0x2c}, {&(0x7f0000000240)={0x104, 0x1b, 0x0, 0x70bd29, 0x25dfdbfb, "", [@typed={0x10, 0x57, @str='/dev/ptmx\x00'}, @typed={0x8, 0x5e, @uid=r3}, @generic="43dbd907d750b128305c7650a738fcf4f608d439e1baafeab36b2d9a1ecb1152cd3043b2625387af38005c647e5a23a8c3a27e5e9f48875b460c816b74dae7551e916bd7228c9ebef81e643a6fd1dfa6924a0a6ad6e030c8c739454933bc754f6c46bb3647547b62e3c7b5df8e4bbb360a498919d70bf385be343da404ff5a13e7d4f0befc9b6998abd2de68aa892f76850f9576c27b507b5ff5d26f84c60b2dbcf552b47a83344b0e3996ee09242ad7247bf2b4855c66849e3529256df1dbc19994eff61c966b322db2c46d806f9bed3f6d870435379ce99c9103"]}, 0x104}, {&(0x7f0000000380)={0x1334, 0x2f, 0x12, 0x70bd2a, 0x25dfdbfe, "", [@generic="fc852011fae5", @nested={0x131c, 0x28, [@typed={0x10, 0x78, @str='/dev/ptmx\x00'}, @generic="1419910f7e43401ac0289f580d81fe6490973c629ea876836c67801377f88817588d783b", @generic="c8a6760412ad869e43464af0fcfc947cfc0011faec0cd7c5fc1ee8201456ee5f9a62b64c8c865baa23961f4d9de3cbd14a0aae6833380c5320224071892bcc6aecb56fad8b5a4ba034cf7a2d2048b55e656296585d8bfaf48f8d07d0346c611cc16248499922af857c3c02430a3783b158c5795231383f009d0191a5d904ed2bc6c268892d942c99c3ce1af10101d1782338eb16e93c01bc19d37021c49af5d3c7f5c9de93797cb8edc321d9c99abea117a75f892b90d714168f9e98", @generic="12f3020a3f94ab40127b19c5f5b94a6f2de7df0ae2a1700a19fadfd611bfd0482323f899ea1d1f1b1fb8dfb8cee81b0d536d6a4092f4ed6738770758c8a367c164721b5e687595c4aac074a70dfb391a8f7758245fbabb8ce5871e8926c904d4e52e25", @generic="3cb40fc1f114f0f44d38a90e8416227a27a526bc7564509050461f59fa43aec597b66677c8e5e3efe8cb14f147fc7b2ff7cf26878aee0c99f76a41fc235bb5bd97fbccd4362052da9f42424d8a2a828ee2556bfbcba949fe417ed72cbaa9410810c78bbbd40bda2ef2dbf91e4b819cc6", @generic="f3d7b5efe1bffe6de2bbe3bef451e78aec90587fb73b5d70234355bfb103fd42c41a80162b7d1541d562b699", @generic="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", @generic="c4d0f0e6fb8ff76ada565d0007d3627660b1e498819e1f6f9e85b23c59d1f8f4e5de056a6d70078b9f68399e00e30b1b922e70b1914c0ca59ffaa974fa79905d74be1be5779ee6bbb92b9149f1e8563c281863f8b0a994dba670669dbaa484e53cefdd8f3af1a5cfde43528ee7e40667e5deea7a5bef9567332e162815f4d562caf043effe89de24f2654d812ad863f2e20034e6ea5619589b9820e1143f2a5ef4448ed66d1b4e31e37b8c32", @generic="58b08b3032e5f177fa67b85c4557b774c7bf4f47815a67885fbf298ac5bd8101363b6d25ae41b5bddaf336334726bdc4cf8c1b5716441cca77645b7c483ab00511aab796b13732c1c86b7598d2530767bd8770b2f39a3a9a4c078075950ac25bf34ad78d682eb075a42ee630a75180fc8f3b79e8591e6e81bf", @typed={0x4, 0x5a}]}]}, 0x1334}, {&(0x7f0000002980)={0x2140, 0x17, 0x820, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x76, @u32=0x8001}, @nested={0x2030, 0x85, [@generic="196cc1be53b158e0e69abec31aac2799d157f6cfd03289605fa6e20e833ac29111addf31e7f009", @generic="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", @typed={0x4, 0x20, @binary}, @generic="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"]}, @generic="a14739361eeae8fffd4546aabf06fea857d7e04aa80bc97838016dd2a94d4855903fa95d736f8d735d575b302234d6540a5a4b44956b82bcdd88ab50673d82947005555dcf702307f8c765b202e257567a8274ba062e781a8a5da4f642115fff7ef4dd46a9e2d16e384ba765b63c1d3ae9c7903248c9eb816c6864afef47e15ec4767494095b0865ad07454b14637328a283b752b8477079d37f938942aa6d7ee70b39b7924041b8374bbf39bcbe3bd3a6253ef71d49e4da045a6397526336d06c29fed633e94adead2cd1e5d6be0086518f27db1930400e438df5289fc05fcf65a2834cb365571281e60edba01a20e12805ed1d", @typed={0x4, 0x73}]}, 0x2140}, {&(0x7f0000000140)={0x2c, 0x33, 0x720, 0x70bd27, 0x25dfdbfc, "", [@typed={0x14, 0x78, @ipv6=@loopback}, @typed={0x8, 0x73, @uid=r3}]}, 0x2c}], 0x5, &(0x7f0000001740)=[@rights={0x38, 0x1, 0x1, [r0, r2, r1, r1, r1, r1, r0, r2, r1, r1]}, @rights={0x28, 0x1, 0x1, [r2, r0, r1, r2, r1]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x78, 0x804}, 0x4000000) [ 419.053667] binder: 25183:25192 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:25 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000440)={0x60, 0x1}, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x6, @remote, 0x3}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x6, 0xa, &(0x7f0000002880)=[{&(0x7f0000000200)="7c90271712153a5a87141e1b83e19e86b3fe40d2d56811f472f528c83d0367f80e86d6c5db6e7f2b8a945e0c0e6f2fd76caa316dd6331b94bc99ca6739552eb3b751fc0e4d30c9129ec8f3b7fc60e6fc9b72a1b24220f6cd2727fe8b8fad5beda4d8ccd3e0d3e2409e6a1abbe4a838b1c9bc4f771cb809c6a295b7837e2046dba7cc72cb8bc85555d933db1e850d1d8af1567e262ef164e3f6529f4ced00923202124b45de9b4d5ff4fa87", 0xab, 0x4}, {&(0x7f0000000480)="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", 0x1000, 0x5}, {&(0x7f00000002c0)="53f4d5861c2a8ce1407d8945b9eb3aed6b0347e1aa5ef4e6db5824bea337bf970b062893f066d0f9343f3ad51bf0feef6e5a137a1f269f01cd74fa1200b7bbf67aaa5f9b9d8c90732b3a9b2ee2a3c71bac2b45d695c8c8364cb10291cc5a9e2fa60dc7282eb0afdfb44eb15470029391a503ea6a14da0bec515034573ac7db0549b2f9868e42545b43281fda57cc24707e1328d1d37e92a53b9c4937d66ed51c71303556f1eed23c5d1d9cdfdd32691ab195430f70ed809c8c6422cb4450ca2e25c073217af966928f45cef274d9ffea54570cafcfdfb6aa3de05a4fc4b40eb756", 0xe1, 0x3}, {&(0x7f0000001480)="854b564bc4497483c3caf33e3d57dae43d2cad1f60f4041a372328971c104f4eb8d0f77bf6a633d454077cf0a6ecc3cc31e5750f510654760fdeee8ef523e95f719d5c0202dca4e01701eb4913875aa414e5fcd48797f82530334628a23114cdb61bba05ca97619417c3651378b4dcd49c9a2c52f14e72804674eb6ed8e65285483b101b093c893d6aca275cdb599a0c8deee3930fa47a5c6ed79c73fd232ed18eaa70de5103e40ffb868216800be6b00f0df36be0021a65ff86a6a19bf30b928f12c197fde1248101867e9d521389e1d6af3a5d25c39bc5fe3cf3045805b964cde0299064dc951320", 0xe9, 0x200}, {&(0x7f00000003c0)="55f79b5de9b2e357aa1148dc3b47eb350cd0f9b8d30797fcc3966cb327172c9fd560464a010d705f9378eb7a6209c65138e2d24bb4f222d58f88d7334a61b1657a7f2a93a8bbe88e93fadb68e0383e75ea5b4eeb54f15630c00ca132b459e616be07ba", 0x63, 0x20}, {&(0x7f0000001580)="8ed4c52724e72ee90b0ed14667ea32445116d1f52234115cfd431443e70b98eb30a341bd151924720cdd895fec4abbcc1837da3961a15fcfbf41fb214870f2ba4d42299441cc29b9afffa269cac8ea169224c3309f02a583df08bedb89a6e51db30c9c5adb49a9224d83ca35122acb7d3663bb41df40145363577f53280e4ea6cb03c2699625608fce27562d6a02265d193310a6b51e1580ca2cb89b5dd36b44ff062bfdf48b74d1f22a0d22626ad2e31c5aceec27d25608cf26a823092cf9ed5ea2fa548abd713f247d6a2821f5d7885b68e3a552b65aae179c7e2148", 0xdd, 0x5d1}, {&(0x7f0000001680)="49729f6da7a63de59fa9ab4796e37b5645ab129f63a8ac1ae1c3c1b29dde316c09cc03010cfb00fa2c843469b80354d2068ede1029086a8f814e55a1658ac519af08023017694b64fb3fd7f36f73a38a2976786153993edad9b1f001974cd6bda362ac6321132234ba0642a7e73d793ea1b051a825d29d10f18d47a7f2794c5a08701a419dd59eeeb95ed290e138f5089c9a70bf0411a9fd98a46389e9047cf05c1d8fec94ea1d4f6a2a00", 0xab, 0x3ff}, {&(0x7f0000001740)="4984c4040775248148059f5025fc6684af3bb321dfe9eb50e6b63a0be7f655d40c8f0da8090c6ed627ed5efee96953e9f4a8aa", 0x33, 0x8}, {&(0x7f0000001780)="84d104c41b9602c043686414fa308d15ccb0867c46bf8aadb09e920606c681f3dd14493746a65b5150ff504e2e7be5f233ccf04c4ffd7e19375f6c438795ead9de3db492b354cd11716c8f78e5a6e63e300a3c36a55242d132fe98f367b599b652cb04444443b1be19a5fc453f64201031e55dffd914cb6ab784594a7c0b6549e7ad0ade7730eae4992801691149da08cf0b25a828acbf22ef8cbdcf5442a3199c14ae5eb606b32f8484e137d9e901144ef6511a7aa877f91ff05b65cab1dc3ec24aa5dcbf1b5f8b0edd5b1009b76c2afa511d81346870d5b34e8cef1d08484478a4a1f5a9dc6f43", 0xe8, 0x7}, {&(0x7f0000001880)="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", 0x1000, 0xd2}], 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="667261676de56e98743d2c00001da4f6a0d20291c20000"]) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x27}) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f}) [ 419.130037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 419.185034] binder: 25183:25219 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 419.198883] binder: 25183:25219 unknown command 1704546753 03:33:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x1e) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc00, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2, &(0x7f000059dffc), &(0x7f0000000000)=0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x7, 0x4) [ 419.233947] binder: 25183:25219 ioctl c0306201 20000040 returned -22 03:33:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) flock(r1, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0xffffffffffffff7f, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r3, 0x1004000000016) close(r1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000140)={0x2000000000000000, 0x3, 0x80000001, 0x3c57}, 0x10) 03:33:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) setresuid(r3, r4, r5) splice(r2, &(0x7f0000000440), r1, &(0x7f0000000500), 0x40000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000640)) [ 419.245799] binder: 25183:25230 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:25 executing program 5: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") mremap(&(0x7f00002ed000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0xb1, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/udp\x00') 03:33:25 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r1 = gettid() ptrace$pokeuser(0x6, r1, 0x5, 0xffff) ftruncate(r0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd2c, 0x25dfdbfe, {0x2, 0x0, 0x34, 0x0, 0xfc, 0x0, 0x0, 0xf, 0x3a00}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mincore(&(0x7f0000ff1000/0xe000)=nil, 0xe000, &(0x7f00000001c0)=""/247) r3 = open(&(0x7f0000000000)='./bus\x00', 0x87ffd, 0x0) ptrace$poke(0xd5496da5adf6c008, r1, &(0x7f00000002c0), 0x2) sendfile(r2, r3, &(0x7f00000000c0)=0xfffffffffffffffd, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000300)={0x400, 0x5}) ftruncate(r0, 0x0) 03:33:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) nanosleep(&(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)) r1 = open(&(0x7f0000000380)='./file0\x00', 0x7f5b6a2b79b7f0f6, 0x2) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="b251ee", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d40124f9d2a071cf5fa897ec54b4b88985bd25b7df6bbdf2fbeb63582db06d95efc6e8e80d1476fed763ee61a39a1dd", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffa8}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000240)={0x10, 0x1ff, {0x56, 0x3bee, 0x8, {0x100, 0xfa}, {0x4696, 0x39}, @rumble={0xffffffffffffff01, 0x27}}, {0x55, 0x93, 0xffffffff00000001, {0x1, 0x3f}, {0x2, 0x7}, @period={0x0, 0x1, 0x2, 0x0, 0x7fffffff, {0x401, 0x3, 0x3fffc0, 0x7}, 0x6, &(0x7f0000000100)=[0x4, 0x7, 0xe1, 0x7, 0x3, 0x1f]}}}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000480)="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") getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000003c0)={@empty, @local, 0x0}, &(0x7f0000000400)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', r3}) 03:33:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) sendfile(r2, r1, &(0x7f0000000340), 0x1ff) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:25 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x208200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 03:33:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) prctl$intptr(0x17, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000840)=0x0) sched_setaffinity(r2, 0xad, &(0x7f00000000c0)=0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000003c0)={{0x3ff, 0x7ff}, 'port1\x00', 0x30, 0x10, 0x3ff, 0x1000, 0x8, 0x20, 0x6, 0x0, 0x6, 0x72f51e7b}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f00001be000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000005c0)={0x0, 0x0}) ptrace$getregset(0x4204, r4, 0x3, &(0x7f0000000800)={&(0x7f00000009c0)=""/4096, 0x1000}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000002c0)=""/164) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000380)={0x0, 0x0, 0x100, 0x3, 0x4}, 0xc) recvmmsg(r1, &(0x7f0000005b80)=[{{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f00000019c0)=""/198, 0xc6}, {&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000001ac0)=""/177, 0xb1}, {&(0x7f0000001b80)=""/140, 0x8c}, {&(0x7f0000001c40)=""/155, 0x9b}, {&(0x7f0000001d00)=""/76, 0x4c}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000001d80)=""/197, 0xc5}], 0x8, &(0x7f0000001f00)=""/210, 0xd2, 0x7ff}, 0x1}, {{&(0x7f0000002000)=@can, 0x80, &(0x7f0000002580)=[{&(0x7f0000002080)=""/164, 0xa4}, {&(0x7f0000002140)=""/207, 0xcf}, {&(0x7f0000002240)=""/112, 0x70}, {&(0x7f00000022c0)=""/134, 0x86}, {&(0x7f0000002380)=""/252, 0xfc}, {&(0x7f0000002480)=""/208, 0xd0}], 0x6, &(0x7f0000002600)=""/4096, 0x1000, 0x7}, 0x4}, {{&(0x7f0000003600), 0x80, &(0x7f0000005840)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/175, 0xaf}, {&(0x7f0000004740)=""/177, 0xb1}, {&(0x7f0000004800)=""/16, 0x10}, {&(0x7f0000004840)=""/4096, 0x1000}], 0x5, 0x0, 0x0, 0x52ee}, 0xca}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f00000058c0)=""/248, 0xf8}, {&(0x7f00000059c0)=""/22, 0x16}, {&(0x7f0000005a00)=""/14, 0xe}, {&(0x7f0000005a40)=""/228, 0xe4}], 0x4, 0x0, 0x0, 0x2}, 0x5}], 0x4, 0x2, &(0x7f0000005c80)) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) vmsplice(r3, &(0x7f0000000980)=[{&(0x7f0000000480)="6624ca94826b70e9b2f1fc272708d6e930ad676135e3ae741f4b6d629647a66d3da22ffa651b9b5a7ead92d9a1bce12b044fa6b98ec3e56995b08399c899ee95eac395c6244f7bad80db0fa7206e25efb62ad8eea8a4e9bfa4b43f8cf5bd8dda434b7868d3f26e36723869c1c082cbe93229707e745d607d532074ec33598d3fbaf66488c11ad4594d77b4dddb5b5ae01dc079e3929bcd13e8bb1005c69f4f8d6339cf414b06e689f29fdcd89c0f14223c90c60eb476ea2f0fbfe7000e99fe968b420b692522e2815c60c358e8c22ea88f1f31875ddc87ceab4f54ba096b", 0xde}], 0x1, 0x4) inotify_init1(0x20080802) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000640)={0x2, 0x2, 0xc9ce, 'queue1\x00', 0xfffffffffffff000}) sendmmsg(r5, &(0x7f0000000140), 0x7b, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000580)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) [ 419.918960] binder: 25270:25273 Acquire 1 refcount change on invalid ref 0 ret -22 [ 419.952946] binder: 25270:25273 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:26 executing program 6: kexec_load(0x262, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="1210e1d795144f635ea0a3224236dfd5937299d14e7d", 0x16, 0x8000, 0x1000}], 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', r2}) tee(r0, r0, 0x0, 0x4374ed61f5d40c54) r3 = socket$packet(0x11, 0x2, 0x300) readahead(r1, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@broadcast}}, &(0x7f00000015c0)=0xe8) bind$packet(r1, &(0x7f0000001600)={0x11, 0x15, r4, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x7}, 0x4) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) dup3(r0, r3, 0x80000) gettid() 03:33:26 executing program 4: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) 03:33:26 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000440)={0x60, 0x1}, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x6, @remote, 0x3}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x6, 0xa, &(0x7f0000002880)=[{&(0x7f0000000200)="7c90271712153a5a87141e1b83e19e86b3fe40d2d56811f472f528c83d0367f80e86d6c5db6e7f2b8a945e0c0e6f2fd76caa316dd6331b94bc99ca6739552eb3b751fc0e4d30c9129ec8f3b7fc60e6fc9b72a1b24220f6cd2727fe8b8fad5beda4d8ccd3e0d3e2409e6a1abbe4a838b1c9bc4f771cb809c6a295b7837e2046dba7cc72cb8bc85555d933db1e850d1d8af1567e262ef164e3f6529f4ced00923202124b45de9b4d5ff4fa87", 0xab, 0x4}, {&(0x7f0000000480)="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", 0x1000, 0x5}, {&(0x7f00000002c0)="53f4d5861c2a8ce1407d8945b9eb3aed6b0347e1aa5ef4e6db5824bea337bf970b062893f066d0f9343f3ad51bf0feef6e5a137a1f269f01cd74fa1200b7bbf67aaa5f9b9d8c90732b3a9b2ee2a3c71bac2b45d695c8c8364cb10291cc5a9e2fa60dc7282eb0afdfb44eb15470029391a503ea6a14da0bec515034573ac7db0549b2f9868e42545b43281fda57cc24707e1328d1d37e92a53b9c4937d66ed51c71303556f1eed23c5d1d9cdfdd32691ab195430f70ed809c8c6422cb4450ca2e25c073217af966928f45cef274d9ffea54570cafcfdfb6aa3de05a4fc4b40eb756", 0xe1, 0x3}, {&(0x7f0000001480)="854b564bc4497483c3caf33e3d57dae43d2cad1f60f4041a372328971c104f4eb8d0f77bf6a633d454077cf0a6ecc3cc31e5750f510654760fdeee8ef523e95f719d5c0202dca4e01701eb4913875aa414e5fcd48797f82530334628a23114cdb61bba05ca97619417c3651378b4dcd49c9a2c52f14e72804674eb6ed8e65285483b101b093c893d6aca275cdb599a0c8deee3930fa47a5c6ed79c73fd232ed18eaa70de5103e40ffb868216800be6b00f0df36be0021a65ff86a6a19bf30b928f12c197fde1248101867e9d521389e1d6af3a5d25c39bc5fe3cf3045805b964cde0299064dc951320", 0xe9, 0x200}, {&(0x7f00000003c0)="55f79b5de9b2e357aa1148dc3b47eb350cd0f9b8d30797fcc3966cb327172c9fd560464a010d705f9378eb7a6209c65138e2d24bb4f222d58f88d7334a61b1657a7f2a93a8bbe88e93fadb68e0383e75ea5b4eeb54f15630c00ca132b459e616be07ba", 0x63, 0x20}, {&(0x7f0000001580)="8ed4c52724e72ee90b0ed14667ea32445116d1f52234115cfd431443e70b98eb30a341bd151924720cdd895fec4abbcc1837da3961a15fcfbf41fb214870f2ba4d42299441cc29b9afffa269cac8ea169224c3309f02a583df08bedb89a6e51db30c9c5adb49a9224d83ca35122acb7d3663bb41df40145363577f53280e4ea6cb03c2699625608fce27562d6a02265d193310a6b51e1580ca2cb89b5dd36b44ff062bfdf48b74d1f22a0d22626ad2e31c5aceec27d25608cf26a823092cf9ed5ea2fa548abd713f247d6a2821f5d7885b68e3a552b65aae179c7e2148", 0xdd, 0x5d1}, {&(0x7f0000001680)="49729f6da7a63de59fa9ab4796e37b5645ab129f63a8ac1ae1c3c1b29dde316c09cc03010cfb00fa2c843469b80354d2068ede1029086a8f814e55a1658ac519af08023017694b64fb3fd7f36f73a38a2976786153993edad9b1f001974cd6bda362ac6321132234ba0642a7e73d793ea1b051a825d29d10f18d47a7f2794c5a08701a419dd59eeeb95ed290e138f5089c9a70bf0411a9fd98a46389e9047cf05c1d8fec94ea1d4f6a2a00", 0xab, 0x3ff}, {&(0x7f0000001740)="4984c4040775248148059f5025fc6684af3bb321dfe9eb50e6b63a0be7f655d40c8f0da8090c6ed627ed5efee96953e9f4a8aa", 0x33, 0x8}, {&(0x7f0000001780)="84d104c41b9602c043686414fa308d15ccb0867c46bf8aadb09e920606c681f3dd14493746a65b5150ff504e2e7be5f233ccf04c4ffd7e19375f6c438795ead9de3db492b354cd11716c8f78e5a6e63e300a3c36a55242d132fe98f367b599b652cb04444443b1be19a5fc453f64201031e55dffd914cb6ab784594a7c0b6549e7ad0ade7730eae4992801691149da08cf0b25a828acbf22ef8cbdcf5442a3199c14ae5eb606b32f8484e137d9e901144ef6511a7aa877f91ff05b65cab1dc3ec24aa5dcbf1b5f8b0edd5b1009b76c2afa511d81346870d5b34e8cef1d08484478a4a1f5a9dc6f43", 0xe8, 0x7}, {&(0x7f0000001880)="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", 0x1000, 0xd2}], 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="667261676de56e98743d2c00001da4f6a0d20291c20000"]) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x27}) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f}) 03:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0faa6ef1336a23f877903f373ce0a99fe6f6ef96f16901a985a45a2a17f0bcc7df7f893fbbd817428c37051abae242dbf8a4a2b932f0071df6f58a966149d06ba6bf4d3e66a4e848d2f7"], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x22) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x7) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c10c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac66bb8a5954f04aab1febafd41b1c8954f56c513bae3fcffb4d46914569719f6cc12a343d322bf516ca8090800000016d6d337cd3805b89fc22299c4368a6d499400000000e0d2016a4717314a3b4799d26cdc15207cee530e74ef1c6c56fb87c332bd"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r0, &(0x7f0000002e00), 0x40000000000014d, 0x22, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x7f, 0x4}) 03:33:26 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000100)={@remote, r3}, 0x14) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/177, 0xb1}}, {{0x0, 0x0, &(0x7f0000001ac0)}}], 0x2, 0x0, &(0x7f0000001c40)={0x77359400}) 03:33:26 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.ima\x00', &(0x7f0000000380)="002fb4e5878d1bbd7a33882e0147df80e95b1e3b80c03149893834fd8a776a0fcb31037ec38d83a720b085a51275653f57770dd38336c7b5c6e9087388f5b68b363032ecb8166958f83e2d0979", 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x4000000000002e3, 0x0) [ 420.161332] binder: 25292:25300 unknown command -244405745 [ 420.188213] binder: 25292:25300 ioctl c0306201 20012000 returned -22 03:33:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0xb7, 0x3, 'client0\x00', 0x5, "a53369bee918e086", "9a0ba9f40df9536dcf1cb779cd1486c40ead4781f7126f2540e53035663877e9", 0x7, 0xffff}) listen(r1, 0x8000) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f00000000c0)=0xfffffffffffffe3e) [ 420.210829] binder: 25292:25308 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:26 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x8) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f00000001c0)="6f1005fbf46be1a1e72a4454ee5108635bdec935bd3baec00442bbb30c4c7b81255c") 03:33:26 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.ima\x00', &(0x7f0000000380)="002fb4e5878d1bbd7a33882e0147df80e95b1e3b80c03149893834fd8a776a0fcb31037ec38d83a720b085a51275653f57770dd38336c7b5c6e9087388f5b68b363032ecb8166958f83e2d0979", 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x4000000000002e3, 0x0) 03:33:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r0, &(0x7f0000002e00), 0x40000000000014d, 0x22, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x7f, 0x4}) [ 420.275291] binder: 25292:25300 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000300)=0x2) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x0, 0x1, 0x0, 0x8, 0x9}, &(0x7f00000005c0)=0x20) fcntl$notify(r1, 0x402, 0x20) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000675bd1000000000000000000000000000000000000000000000000000000000093000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003acdb7c7a66a4ce21e126cc842310c90316a9b61c9b605efe97c2ea5d215a26e03f2442e9e259a3e7276e5a51b6a0aa7e87729b3946561c7cb6cdf40562e7e9b409e065cca04aaba12b8c9f456a09290f0f73850f59f2a265f501ba188d123a746a4882cf36e4abf23c09645a4bf54693271411ef80e5fbac96446614c77c20323786a8ec5f06976782dd464d100b3af6a28dad243ae28b500761fbdbc2726252e64c5ae213c3fe8427ec0631c0bd1f99e642da50d271b9aa073b27f62ade93127fe97032c23f7e18508d1839bb8df34c9e18616b06d53439523743ad05c0d40bb0b13160a367d8dd545fcfff62c79b49d89f8963ef2c184385ae55157575d9c96eaa445727457fa4a2fe4663fa84fb353851565f29f53bd5370f583644e2238f1f759307a40660db424f4929fd19133673c9621b9947e27acf7e8bc10c9f108509a16f1d14bf512be67794756dfd099d6911d483832a4c2c46d58111e9c4798edd41f6d3aef82d8301a0bb691dc15ec418d5e2b5825c80797c4918197cf41f4b8991558020000000000006ef9de6f7fa4746f740fac00e2d7d92f8fb3757cc6074a68f0afd6cf8822dd1d0067e4b2cf74859e35216c5b001e8bb85504445fde017e26198474e0f8cd54b54344d23ac018248bfcd021a18711f6c997ba170fdf24176f435c97e1693ca931488f7aed03c39385ba2a827b26d5556c9c6a7752011356fa129fb5c3041ba3153d0f12aa16e8f86b6869a5277c42d1c196926834f851c95e0f117e646c17ac5de82848f27995d6c64ba406580fd88205e116878c84b4cd2b7312e8843d6b89bffa0c454e48ba67afa043186633512adc44948c09a448fadddd73733e09e1fc5f3d0a02e62a9f91dff179ddc28f0a79727d5d5b8a0b8b5fc047ca8848a8902fedab0a8595924452f5bea0555fd086786a9f3506d81a387c4cc7ad1aa24b5589083458ac8d1e33143c63df224444a0aa29419236125cbf6a7be9f9d06d425b00b19d91385e4ee3b29fb9aa2155179c7178f6b14bcc986b67a19f5a60d474838dd495df96ed4f50b0b83e7f625b7a1146dcdcf2ad6f99a709bf3adbc7efc6520439c8e1386ad00a915501eb624ab8901490ee762c423fe003c38fb27ca602375f5d699453c78caf1d8f835567e222919aa3f5c8677deac5df43040df986f880e97c0a52d17c5e4eca99be3d3dcbfec37b095e8c948828b7379168881fa976da2d45190a94f79e60230c35f3bef7f391992f8c8fce94db008c31e4d6e14acdc2c61b184da53c392794234d2b8ae929"], 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) [ 420.334231] overlayfs: unrecognized mount option "oûôká¡ç*DTîQc[ÞÉ5½;®ÀB»³ L{%\" or missing value 03:33:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2c67406347c562c2988ebf726f75705f69643d", @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) r1 = getpgrp(0xffffffffffffffff) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000180)=0xfffffffffffffe00) capget(&(0x7f0000000080)={0x0, r1}, &(0x7f00000000c0)={0x4, 0x6, 0xfffffffffffffff8, 0x8, 0x8, 0xa3fb}) 03:33:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80807, 0xffff, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) tgkill(r1, r2, 0x28) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000300)=""/222, &(0x7f0000000400)=0xde) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getpgrp(0x0) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380), &(0x7f00000004c0), 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/context\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000140)={0x8, 0x200, 0x9, 0x4, 0x7, 0x3b}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$inet6(0xa, 0x5, 0x40) shutdown(0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000440)=0x9) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 03:33:26 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x4300, 0x8) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fcntl$notify(r2, 0x402, 0x6) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000240)={0xedc1, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23}}}, 0x108) getsockopt(r1, 0x6, 0x1, &(0x7f0000000140)=""/102, &(0x7f00000001c0)=0x66) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x8001, 0x2000200000) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) gettid() ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000400)=""/217) write$P9_RSTAT(r1, &(0x7f0000000500)={0x80, 0x7d, 0x2, {0x0, 0x79, 0xc1, 0x497, {0x3, 0x3, 0x4}, 0x0, 0x0, 0x7fffffff, 0xfbeb, 0xe, 'cgroupem0bdev#', 0x10, "766574683100000000ffffffffffef00", 0x19, 'ppp0loeth0proc[@{trustedQ', 0xf, 'system:keyring{'}}, 0x80) 03:33:26 executing program 6: kexec_load(0x262, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="1210e1d795144f635ea0a3224236dfd5937299d14e7d", 0x16, 0x8000, 0x1000}], 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', r2}) tee(r0, r0, 0x0, 0x4374ed61f5d40c54) r3 = socket$packet(0x11, 0x2, 0x300) readahead(r1, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@broadcast}}, &(0x7f00000015c0)=0xe8) bind$packet(r1, &(0x7f0000001600)={0x11, 0x15, r4, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x7}, 0x4) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) dup3(r0, r3, 0x80000) gettid() 03:33:26 executing program 2: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x72109c5fef5d34d3) rt_sigprocmask(0x0, &(0x7f0000000180), 0x0, 0xffffffffffffff5b) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000440)={{0x0, 0x3, 0x1, 0x3, 0x6}, 0xffffffffffffb284, 0xfffffffffffffffe, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0x2, 0x8, 0x8}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0xffffffffffffee6, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000001c0)={0x0, 0x400}) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) 03:33:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000140)={0x3, 0x1, 0x1}) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}}) r1 = getpid() setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x10000, 0x8, 0x6, 0x101, 0x0, 0x2, 0x400, 0x3, 0x2ea, 0x7fff, 0x1, 0x5, 0x80000000, 0xffff, 0x80000001, 0x0, 0x8, 0x100000001, 0x2, 0x1, 0x9, 0xffffffffffff0000, 0x6, 0x8, 0x3, 0x8, 0x9, 0x5, 0x4, 0x5, 0x2, 0x7fff, 0x9, 0x800, 0x4, 0x9, 0x0, 0x6, 0x5, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x8, 0x6000000, 0x3, 0x0, 0x9}, r1, 0x4, 0xffffffffffffffff, 0x2) r2 = add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) 03:33:26 executing program 0: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) clone(0x2000000, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)="16e5985f7610b3e2239d684a6222c2443394ddd04e24562f2b5be3e0ab7a359341e8bf5a43d478d306f4f1cc5f5a2a28ac8bffa5307c07a0d33f6285af7ee50cf9e953e1f59b7bd959cd359b6c039c003182850d36bbcae85ac5e5a8f9f3a0bab8a07d78f1ab5f6f2a06384127de0b9970f4db74cd7bca7a5bf3f3592923d01e6ae12d4243e6a2c3abc25a64d18f4d1140f6afc43e1154c9874ffcee3caaef0e62489f601c") r2 = memfd_create(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[{0xf, 0x8}, {0x8, 0x10001}, {0x7, 0x4}], 0x3) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x101, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) pipe2$9p(&(0x7f00000003c0), 0x4000) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="79f7882b3072b0483c0d1733fbd41a53f685923cd67173cc2b8fc356429c04a62d8dd4583287b543550b3823e3407bad66571b92c4c5d21db68dc59ead60ea6b1e5f87f190b96bd42ed5ca7232b5f3b426", 0x51}], 0x1) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="49004b7ba50d68d00dfb89ac790000290100000000000000000000000000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000480)) mmap(&(0x7f0000ee3000/0x9000)=nil, 0x9000, 0xffffffffffffffff, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ee8000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000) 03:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x401) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5d, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$TCXONC(r3, 0x540a, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'ip_vti0\x00', {0x2, 0x4e21, @multicast2}}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a305b31830192af6dab2364d667ec8beadf0a70e6efd66c8d60e9a6080305bcf6f87c2184a7a8426a8586d3afbf2c08e12a5111ff494814454e0d27b32ee84498199e34c64ac9155dccddb59adf137e80c96380acf31db6fa0632bb97d3a1b29441"], 0x61) r1 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000440)='&ppp0-\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x48000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) clock_gettime(0x2, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r3, r4+10000000}, 0x0) 03:33:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) r3 = gettid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000280)=r3) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000029c0), &(0x7f0000002a00)=0xc) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000300)) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000002c0)={"6272696467655f736c615690723000", 0xfffffffffffffffc}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) getdents(r5, &(0x7f00000006c0)=""/135, 0x87) close(r5) accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x800) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000df000000f0b09b68605470fd71f79cc63f691e0008001b4848fc7c79d10f5f112050290000000000bdf1456f684a3ac5b8dd00003925"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000002800)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000000540)=""/9, 0x9}], 0x2, &(0x7f00000005c0)=""/43, 0x2b, 0x40}, 0xce}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/29, 0x1d}], 0x1, &(0x7f0000000780)=""/178, 0xb2, 0x1}, 0x3}, {{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000008c0)=""/225, 0xe1}], 0x2, &(0x7f0000000a00)=""/246, 0xf6, 0x12d}, 0x4}, {{&(0x7f0000000b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/192, 0xc0}], 0x1, &(0x7f0000000c80)=""/137, 0x89, 0x2}, 0x40}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000d40)=""/255, 0xff}, {&(0x7f0000000e40)=""/27, 0x1b}, {&(0x7f0000000e80)=""/255, 0xff}, {&(0x7f0000000f80)=""/182, 0xb6}, {&(0x7f0000001040)=""/123, 0x7b}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002140)=""/94, 0x5e, 0xfffffffffffffff8}, 0x8}, {{&(0x7f00000021c0)=@generic, 0x80, &(0x7f0000002680)=[{&(0x7f0000002240)=""/18, 0x12}, {&(0x7f0000002280)=""/109, 0x6d}, {&(0x7f0000002300)=""/114, 0x72}, {&(0x7f0000002380)=""/106, 0x6a}, {&(0x7f0000002400)=""/21, 0x15}, {&(0x7f0000002440)=""/63, 0x3f}, {&(0x7f0000002480)=""/131, 0x83}, {&(0x7f0000002540)=""/112, 0x70}, {&(0x7f00000025c0)=""/168, 0xa8}], 0x9, &(0x7f0000002740)=""/146, 0x92, 0xffffffff}, 0x56}], 0x6, 0x40, &(0x7f0000002980)) r6 = socket$packet(0x11, 0x3, 0x300) dup2(r6, r0) 03:33:26 executing program 6: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x23, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @increfs_done], 0x0, 0x0, &(0x7f00000007c0)}) 03:33:26 executing program 2: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x72109c5fef5d34d3) rt_sigprocmask(0x0, &(0x7f0000000180), 0x0, 0xffffffffffffff5b) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000440)={{0x0, 0x3, 0x1, 0x3, 0x6}, 0xffffffffffffb284, 0xfffffffffffffffe, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0x2, 0x8, 0x8}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0xffffffffffffee6, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000001c0)={0x0, 0x400}) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) 03:33:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000040)={0x0, 0x9, 0x0, &(0x7f0000000700)}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) [ 421.013140] binder: 25375:25385 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:27 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x2) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000003c0)={0x0, 0x0}) r2 = getuid() getgroups(0x1, &(0x7f0000000400)=[0x0]) syz_mount_image$vfat(&(0x7f0000000980)='vfat\x00', &(0x7f00000009c0)='./file0\x00', 0x100000001, 0x3, &(0x7f0000000b80)=[{&(0x7f0000000a00)="280d20d5d0ff675b812d021516359a5f81835ee7cab3b366c9572cf14ed69eb4bb629642efe26458a67825bfa42487", 0x2f, 0x80}, {&(0x7f0000000a40)="353c6f8d14185cd9e6a2e156755f4771cab48729e586ebf0c2751d9bce915a34e5cf33173bc52d6bb086ba9850afac08407961c97fcfd8a4e45d6bee3563f7cc078e2a8a1298b124596610aa411e13b87ca52aed71216a40fc4d2e17400d0dd75087408857ad48c21421194d0b702d9c4d6c11f6e35eb0eb056f090b15d0f7", 0x7f, 0x9}, {&(0x7f0000000ac0)="99057ebc5c210ec7b12faaf34b039d9fbe040d5e28d67de405cb35c5d487ed415a33b50d056bf4bc8f0a7dfab5f17a40a373e2f8ab35bf51c1c03992faca88ae24ad8a60b4bb04aaece47edae5873fceb2247a227da89ad851b6943e955971b38640d9dbdb89e7dc4d5d9ad58d6c31823a5d7ad3621b0dcb5a636f4775d7757b7ff19686827d52aa779f396903733877a7ad195e0ce4b8a753c38bb6f8b63c78df84a16297f067838f945cf3", 0xac, 0x7}], 0x10080, &(0x7f0000000c00)={[{@utf8no='utf8=0'}, {@numtail='nonumtail=0'}]}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000440)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000780)=0xe8) fstat(0xffffffffffffff9c, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)="42947c9651990888b85fef7296c6502ed994bb33296548eecef434c1610cceeadcc32e168da2e57a9f06d79a54c2b306b0750eede378b9d3cc2242f9cbd715cb858ef1e4c0050a121439590b2f0bf8d8a851cde5038784cdd96740993c6061c7dd52759c56b622e863067c6e434e7f2a7876f1ff1d77ed9f74df1d9ccb150b719894bfdd9012cb40731b44e1e653b84683739a4e6852ca74", 0x98}, {&(0x7f0000000180)="400c1a70c1fba4ae4d808db77ce594d639d843b07129a4417c07637e6693e72126a3da55480ea334ae60aa3518748ce31d30fd55c04d71ff26008f4eaa160ee9ce36c8ea9394bc852542d650de6444442e02b44efafe", 0x56}, {&(0x7f0000000300)="d57a49e8c00201be01adab3ae8c919181a0da48439598a5ad97505945e864b8ca7c212df75dcdc52fac68a186253046b7d7cfbbe6e30b597485092fcf729e520cb3497d537a7eaeef04b28ea3dc9682554dd7084de894be24c2da3406150e1d59d9c5b6e14a89fb8f44b48824bc5aadc80dc", 0x72}, {&(0x7f0000000080)="e98870688b64538063391f178a9e2893374aafa53494f942119e132b6992b759d02b2a182b", 0x25}], 0x4, &(0x7f0000000900)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0x44000}], 0x1, 0x40) memfd_create(&(0x7f0000000000)='ppp1+\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000000c0)='bdev\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, r10) getpeername$unix(r10, &(0x7f0000000880), &(0x7f0000000200)=0x27) [ 421.071313] binder: 25375:25385 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 421.074580] md: md0 has zero or unknown size, marking faulty! [ 421.074600] md: md_import_device returned -22 [ 421.094978] md: md0 has zero or unknown size, marking faulty! [ 421.104198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 421.142978] FAT-fs (loop2): invalid media value (0x9d) [ 421.142984] FAT-fs (loop2): Can't find a valid FAT filesystem [ 421.146623] binder: 25375:25394 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:33:27 executing program 3: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000340)={0x1, 0x8, 0x2}) r4 = getpgrp(0x0) setpriority(0x0, r4, 0x10000) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f000000dff8), 0xfffffffffffffee3, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000440)=""/29, &(0x7f0000000480)=0x12) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20980, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000010207041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000400)={@multicast2, @remote, @multicast1}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) [ 421.146631] binder: 25375:25394 unknown command 1704546753 03:33:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e24, 0x0, @local}, 0x31a) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) sendto$inet6(r1, &(0x7f0000000140), 0x100000, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00007a0000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x400, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x2a2, 0x10400003) socket$inet6_tcp(0xa, 0x1, 0x0) [ 421.146639] binder: 25375:25394 ioctl c0306201 20000300 returned -22 [ 421.146793] binder: 25375:25394 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:27 executing program 2: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x10100, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x7f) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet6(0xa, 0x800, 0xfffffffffffffc00) ioctl(r5, 0x0, &(0x7f0000000100)="295ee131") ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000000000000000000000000000000000000000000000000000000000000000000f2c600806037fef8b8be6ff3b51bd0fca65b1d7596ac25fa0446a78fdd5ade2ce7204587cb5b55580c94e080dcd7f876c5490600000dbe2d9596903336"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001a40)={@empty, @multicast1}, &(0x7f0000001a80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001b00)={{{@in=@multicast2, @in=@loopback}}, {{}, 0x0, @in=@dev}}, &(0x7f0000001c00)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001c80)={0x0, @remote, @local}, &(0x7f0000001cc0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e40)={0x0, @empty, @multicast1}, &(0x7f0000001e80)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001ec0)={'veth0_to_bridge\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001f00)={{{@in=@rand_addr, @in=@multicast1}}, {{@in6=@ipv4}, 0x0, @in6=@local}}, &(0x7f0000002000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'team0\x00'}) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002140)={0x0, @loopback, @dev}, &(0x7f0000002180)=0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x401, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000300)=""/19) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) gettid() syz_open_dev$usbmon(&(0x7f00000004c0)='/dev/usbmon#\x00', 0x10000000000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) read(r2, &(0x7f0000000140)=""/11, 0xb) [ 421.243634] FAT-fs (loop2): invalid media value (0x9d) [ 421.243640] FAT-fs (loop2): Can't find a valid FAT filesystem [ 421.244332] binder: 25408:25410 Acquire 1 refcount change on invalid ref 0 ret -22 [ 421.295846] binder: 25408:25410 unknown command 0 [ 421.295856] binder: 25408:25410 ioctl c0306201 200003c0 returned -22 [ 421.344810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 421.395397] binder: 25408:25423 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 421.395406] binder: 25408:25423 unknown command 1704546753 [ 421.395415] binder: 25408:25423 ioctl c0306201 20000040 returned -22 [ 421.467337] binder: 25408:25423 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 421.503708] md: md_import_device returned -22 INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 03:33:27 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80807, 0xffff, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) tgkill(r1, r2, 0x28) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000300)=""/222, &(0x7f0000000400)=0xde) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getpgrp(0x0) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380), &(0x7f00000004c0), 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/context\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000140)={0x8, 0x200, 0x9, 0x4, 0x7, 0x3b}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$inet6(0xa, 0x5, 0x40) shutdown(0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000440)=0x9) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 03:33:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) r3 = gettid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000280)=r3) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000029c0), &(0x7f0000002a00)=0xc) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000300)) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000002c0)={"6272696467655f736c615690723000", 0xfffffffffffffffc}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r5, &(0x7f00000006c0)=""/135, 0x87) close(r5) accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x800) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000df000000f0b09b68605470fd71f79cc63f691e0008001b4848fc7c79d10f5f112050290000000000bdf1456f684a3ac5b8dd00003925"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000002800)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000000540)=""/9, 0x9}], 0x2, &(0x7f00000005c0)=""/43, 0x2b, 0x40}, 0xce}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/29, 0x1d}], 0x1, &(0x7f0000000780)=""/178, 0xb2, 0x1}, 0x3}, {{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000008c0)=""/225, 0xe1}], 0x2, &(0x7f0000000a00)=""/246, 0xf6, 0x12d}, 0x4}, {{&(0x7f0000000b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/192, 0xc0}], 0x1, &(0x7f0000000c80)=""/137, 0x89, 0x2}, 0x40}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000d40)=""/255, 0xff}, {&(0x7f0000000e40)=""/27, 0x1b}, {&(0x7f0000000e80)=""/255, 0xff}, {&(0x7f0000000f80)=""/182, 0xb6}, {&(0x7f0000001040)=""/123, 0x7b}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002140)=""/94, 0x5e, 0xfffffffffffffff8}, 0x8}, {{&(0x7f00000021c0)=@generic, 0x80, &(0x7f0000002680)=[{&(0x7f0000002240)=""/18, 0x12}, {&(0x7f0000002280)=""/109, 0x6d}, {&(0x7f0000002300)=""/114, 0x72}, {&(0x7f0000002380)=""/106, 0x6a}, {&(0x7f0000002400)=""/21, 0x15}, {&(0x7f0000002440)=""/63, 0x3f}, {&(0x7f0000002480)=""/131, 0x83}, {&(0x7f0000002540)=""/112, 0x70}, {&(0x7f00000025c0)=""/168, 0xa8}], 0x9, &(0x7f0000002740)=""/146, 0x92, 0xffffffff}, 0x56}], 0x6, 0x40, &(0x7f0000002980)) r6 = socket$packet(0x11, 0x3, 0x300) dup2(r6, r0) 03:33:27 executing program 2: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a7cc80700315f85715070") getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/ip_tables_matches\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x7fffffff, 0x2, {0x2, 0x3, 0x3, 0x0, 0x52cf}}) 03:33:27 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x19c) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r2, &(0x7f0000000200)={0x14}, 0x14) r3 = dup2(r2, 0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d65659c2ee55eb581135e7a9ddda660a09"], 0x3e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000002c0)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000014c0)={0x5b8, 0x3a0, 0xd3, 0x7ff}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "4f019b55a1be58df7b55762023ad56d08f16133d2099807ad4d300"}) write$cgroup_type(r3, &(0x7f0000001580)='threaded\x00', 0x9) accept(r3, &(0x7f0000001440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x80) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000001340)="c2fe2b219e01a0eda0077fdb1a6b4f469643d9b01b6b702f1aa5f50e04657f9b109bd206dab2a6333addf9a35795b662d57cbe8a52835af9e58301a388bb5d6b1ec6eca6c866d5d9ea13f797293571e7d3b52894311e8515f78ae397cc69a130cff1e829ec62f6897866399b2a0fa8100985f8b13897e701f62e3462ee78e73eca4e9b24dae9e6e62033aa235ecc756db6") 03:33:27 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x7fff, 0x8, 0x2ec, 0x6, 0x0, 0x0, 0x2002, 0xa, 0x3, 0x100000001, 0xffffffff, 0x7fff, 0x40, 0x80000001, 0x5f58, 0x5, 0x3, 0x0, 0x100000000, 0x6, 0x800, 0x608, 0x7, 0x46, 0xcd, 0x4, 0x80000000, 0xffffffffffffff7f, 0x3, 0x9, 0x4, 0xfffffffffffffff9, 0x400, 0x1, 0x1, 0x5, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x9610b15955d91df0}, 0x8000, 0x221, 0x401, 0x7, 0x1, 0x9, 0x6}, r2, 0x5, r1, 0x1) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 421.744580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:27 executing program 0: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) clone(0x2000000, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)="16e5985f7610b3e2239d684a6222c2443394ddd04e24562f2b5be3e0ab7a359341e8bf5a43d478d306f4f1cc5f5a2a28ac8bffa5307c07a0d33f6285af7ee50cf9e953e1f59b7bd959cd359b6c039c003182850d36bbcae85ac5e5a8f9f3a0bab8a07d78f1ab5f6f2a06384127de0b9970f4db74cd7bca7a5bf3f3592923d01e6ae12d4243e6a2c3abc25a64d18f4d1140f6afc43e1154c9874ffcee3caaef0e62489f601c") r2 = memfd_create(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[{0xf, 0x8}, {0x8, 0x10001}, {0x7, 0x4}], 0x3) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x101, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) pipe2$9p(&(0x7f00000003c0), 0x4000) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="79f7882b3072b0483c0d1733fbd41a53f685923cd67173cc2b8fc356429c04a62d8dd4583287b543550b3823e3407bad66571b92c4c5d21db68dc59ead60ea6b1e5f87f190b96bd42ed5ca7232b5f3b426", 0x51}], 0x1) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="49004b7ba50d68d00dfb89ac790000290100000000000000000000000000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000480)) mmap(&(0x7f0000ee3000/0x9000)=nil, 0x9000, 0xffffffffffffffff, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ee8000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000) 03:33:27 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="24000000520007041dfffd946f61830002200a00090000e7fe1c40000c1ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ebea8653b1cc7e63975c02007b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:33:27 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = getpgid(0x0) r2 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa010040}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001100000029bd7000fddbdf251800000008008400", @ANYRES32=r1, @ANYBLOB="0c005e00000400000000000000014600f1f9db590781b0cb6a55a4e0b6134e045e9161d00f932da4406c4d9f6a0fc470385f167dee0c9bb48a5f04b6b283a08f3cb3e85b7967252ea164265ecc1b8ad3554c94de118dc3b0e6fb268ce31323735010b9cfdd1fa3b65ed853c73c92f964780e08001600", @ANYRES32=r2, @ANYBLOB="0961b607af7fc0adc9162357bac02e326c2a3863f9266e66b6f1fab9dd1fc81ba501ff9913cb48a777fdd5f8292f8233f2f00492a7431ad282450ad0244c22d4965d61aff004f2dc326bdb0349b81c4400f8d6b2cb1e1fd90d21484b6b607c8161ab081a554aa462bf0dca5ec53b0885b53d58ae97ef0755dba169cee73d70b78f3e207b339ebbd5c12b3ca66f4ad6000000"], 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x800002, 0x11, r3, 0x0) r4 = getpid() r5 = syz_open_procfs(r4, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000000000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10) getpeername$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 03:33:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) r3 = gettid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000280)=r3) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000029c0), &(0x7f0000002a00)=0xc) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000300)) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000002c0)={"6272696467655f736c615690723000", 0xfffffffffffffffc}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r5, &(0x7f00000006c0)=""/135, 0x87) close(r5) accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x800) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000df000000f0b09b68605470fd71f79cc63f691e0008001b4848fc7c79d10f5f112050290000000000bdf1456f684a3ac5b8dd00003925"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000002800)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000000540)=""/9, 0x9}], 0x2, &(0x7f00000005c0)=""/43, 0x2b, 0x40}, 0xce}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/29, 0x1d}], 0x1, &(0x7f0000000780)=""/178, 0xb2, 0x1}, 0x3}, {{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000008c0)=""/225, 0xe1}], 0x2, &(0x7f0000000a00)=""/246, 0xf6, 0x12d}, 0x4}, {{&(0x7f0000000b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/192, 0xc0}], 0x1, &(0x7f0000000c80)=""/137, 0x89, 0x2}, 0x40}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000d40)=""/255, 0xff}, {&(0x7f0000000e40)=""/27, 0x1b}, {&(0x7f0000000e80)=""/255, 0xff}, {&(0x7f0000000f80)=""/182, 0xb6}, {&(0x7f0000001040)=""/123, 0x7b}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002140)=""/94, 0x5e, 0xfffffffffffffff8}, 0x8}, {{&(0x7f00000021c0)=@generic, 0x80, &(0x7f0000002680)=[{&(0x7f0000002240)=""/18, 0x12}, {&(0x7f0000002280)=""/109, 0x6d}, {&(0x7f0000002300)=""/114, 0x72}, {&(0x7f0000002380)=""/106, 0x6a}, {&(0x7f0000002400)=""/21, 0x15}, {&(0x7f0000002440)=""/63, 0x3f}, {&(0x7f0000002480)=""/131, 0x83}, {&(0x7f0000002540)=""/112, 0x70}, {&(0x7f00000025c0)=""/168, 0xa8}], 0x9, &(0x7f0000002740)=""/146, 0x92, 0xffffffff}, 0x56}], 0x6, 0x40, &(0x7f0000002980)) r6 = socket$packet(0x11, 0x3, 0x300) dup2(r6, r0) 03:33:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'ip_vti0\x00', 0x7}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x44}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x33d, &(0x7f00000001c0)}}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x88000, 0x0) prctl$setfpexc(0xc, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000140)="cfc73606485189ad5a1f46cebd9afe2437708d96d2b349b475ca639d1a11be8a7c017ce9121cc670ec6926136d1a20451deba9790dc487f32a5e810fcdd7c0074ca9166c528e00d363d3fb1875339ce05b593de5e1742eca40e8605eca7df38ec5e3182788540e5a3ae1974ee5821845c58c93a18109f9ff5342965a9abb072c475f82ed41b6c1fd0ca9e3067f780700000000000000bde121b9ea6d4a3f362bba28ff2d175cb47658b022b578058a27b325545cd590718967e2f43b7af7fec3355666113570bc0f0087e43ba124b1d64a7445173d8bb501472011dfd7fbc873e125dac065e6ac467406") [ 421.863220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 03:33:27 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x3b, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000001000)={{}, {0x77359400}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x240, 0x0) mq_timedreceive(r0, &(0x7f00000001c0)=""/6, 0x6, 0x9, &(0x7f0000000200)={0x0, 0x989680}) timer_gettime(0x0, &(0x7f00000000c0)) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x7530}, 0x10) [ 421.927034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 03:33:27 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x20, &(0x7f0000a1aff7)={@loopback}, 0x37a) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000000c0)={'broute\x00', 0x0, 0x3, 0x0, [], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)}, &(0x7f0000000140)=0x78) 03:33:27 executing program 1: socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000040)) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800), 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r1) [ 421.971127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r2, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x80) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a3430022bf516ca8343621235016d6d337a8fa953d554a570b3acd0763cd581cabf3cc4984e71811ec21892372d171aa9f325a0bf40faaf9116de47be4159a5d400f3699f77007b97eeaeed910b2148f1a2ab867d65a35b7d40fdb29234b4eabd468f103c7aedef4c551592df361cb70236be280bad14211c829d98f5a9838246b1f02d3844a41490056"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x9e, 0x0, &(0x7f0000000080)=[@reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000000), &(0x7f0000000040)=[0x48, 0x18, 0x28, 0x0, 0x38, 0x40]}, 0x8}}], 0x0, 0x0, &(0x7f0000000100)}) 03:33:28 executing program 4: r0 = memfd_create(&(0x7f00000000c0)="23f596c52b39106ec413e4a88fe10100002b00", 0x3) fcntl$addseals(r0, 0x409, 0x8) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x20000961b, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x200000011, r0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) modify_ldt$read(0x0, &(0x7f0000000040)=""/58, 0x7) 03:33:28 executing program 7: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x2000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000700), 0x0) 03:33:28 executing program 1: recvfrom$unix(0xffffffffffffffff, &(0x7f00000002c0)=""/86, 0x56, 0x0, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8001000000002c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xffef}], 0x1, &(0x7f0000000200)}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x200004, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@aname={'aname', 0x3d, 'aname'}}, {@nodevmap='nodevmap'}, {@posixacl='posixacl'}]}}) 03:33:28 executing program 5: sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8957, &(0x7f0000000180)={'ifb0\x00', @ifru_addrs=@llc={0x1a, 0x33f, 0x100000000, 0x0, 0x0, 0xd4, @remote}}) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)="72616d66730026f1729c6a430542f8e4fbeff6c5ef7798c63ae1352c19effe6dbf659369548e80103c80b9de13ced7fb74cc970cf1fb700256f6dbead1f38e5b69d25c23a5d71e77d1a993076b89517fd8f3803cbe0c2e45a4876a124ec9ef992e7c8ab08b86a1311a2b6744ef6be2230b74f92d588cc84d3ad580cd4076bc0d8be3d9b9562cac769b425ddaaedd960540d16ff7747ea761af655268", 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$TIOCSCTTY(r1, 0x540e, 0x497a) sendfile(r0, r1, &(0x7f0000000000), 0x80000002) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x1, 0x1, 0x80000000, 0xfd36, 0x9, 0x1, 0x49, 0x3, 0x4, 0x4}) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/context\x00', 0x2, 0x0) [ 422.287299] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 422.294570] FAT-fs (loop6): Filesystem has been set read-only [ 422.302734] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 422.312078] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 422.320761] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 422.368388] binder: 25513:25520 Acquire 1 refcount change on invalid ref 0 ret -22 [ 422.387253] binder: 25518:25523 got reply transaction with no transaction stack [ 422.387263] binder: 25518:25523 transaction failed 29201/-71, size 0-48 line 2921 [ 422.392681] binder: 25518:25528 got reply transaction with no transaction stack [ 422.392691] binder: 25518:25528 transaction failed 29201/-71, size 0-48 line 2921 03:33:28 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x19c) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r2, &(0x7f0000000200)={0x14}, 0x14) r3 = dup2(r2, 0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d65659c2ee55eb581135e7a9ddda660a09"], 0x3e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000002c0)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000014c0)={0x5b8, 0x3a0, 0xd3, 0x7ff}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "4f019b55a1be58df7b55762023ad56d08f16133d2099807ad4d300"}) write$cgroup_type(r3, &(0x7f0000001580)='threaded\x00', 0x9) accept(r3, &(0x7f0000001440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x80) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000001340)="c2fe2b219e01a0eda0077fdb1a6b4f469643d9b01b6b702f1aa5f50e04657f9b109bd206dab2a6333addf9a35795b662d57cbe8a52835af9e58301a388bb5d6b1ec6eca6c866d5d9ea13f797293571e7d3b52894311e8515f78ae397cc69a130cff1e829ec62f6897866399b2a0fa8100985f8b13897e701f62e3462ee78e73eca4e9b24dae9e6e62033aa235ecc756db6") 03:33:28 executing program 0: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) write$selinux_access(0xffffffffffffffff, &(0x7f00000003c0)={'system_u:object_r:console_device_t:s0', 0x20, 'unconfined'}, 0x46) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x5612, 0x0, 0x19, 0x0, "a04caeac0e5aa40eb75d5a7dea7a4204b2f5f22195f365cad379befe7785d9c29f487b9fb3b6d17794cc151a432c008f7375a302b3bb9625d4b33eb1624ec685", "e441db7501f40018acf0c11f749a595c417fa75e0cc3af3874452c09a243c26e", [0x7, 0x8000]}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r2, r3, r4}, 0xc) fcntl$getflags(0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x181000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_DEL(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x204001}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, r8, 0xc00, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) pread64(r5, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r5) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000580)={'vcan0\x00', {0x2, 0x4e23}}) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(r9, &(0x7f0000643ff8)='./file0\x00', 0x0) r10 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000040)={0x2, 0x401, 0xffffffff, 0x9, 0x101, 0x3, 0xc84, 0x3f, 0x7fffffff, 0x100, 0x6b, 0x4}) openat(r10, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) 03:33:28 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000880)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000680)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) sched_setaffinity(r0, 0xffffff51, &(0x7f00000000c0)=0x9) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0xc1) r2 = open(&(0x7f0000000ac0)='./bus\x00', 0x100, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x880, 0x7f, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x400005, 0x3}) mq_unlink(&(0x7f0000000a80)='bdev\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000e00)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000000)) getpeername$unix(r4, &(0x7f0000000800), &(0x7f0000000200)=0x65) mq_timedsend(r3, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r7 = getpid() mq_notify(r3, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r7}) syncfs(r1) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x204100, 0x0) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, &(0x7f0000000240)) r9 = getegid() ioctl$PIO_FONT(r8, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x4) setresgid(r6, r9, r6) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r4) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x6) 03:33:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000002340)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000140)=""/246) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) close(r2) 03:33:28 executing program 7: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x2000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000700), 0x0) 03:33:28 executing program 1: recvfrom$unix(0xffffffffffffffff, &(0x7f00000002c0)=""/86, 0x56, 0x0, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8001000000002c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xffef}], 0x1, &(0x7f0000000200)}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x200004, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@aname={'aname', 0x3d, 'aname'}}, {@nodevmap='nodevmap'}, {@posixacl='posixacl'}]}}) [ 422.392983] binder: undelivered TRANSACTION_ERROR: 29201 [ 422.393009] binder: undelivered TRANSACTION_ERROR: 29201 [ 422.398466] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 422.398534] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) 03:33:28 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000107000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) syz_open_procfs(r0, &(0x7f00000000c0)='autogroup\x00') write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000004c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x78) [ 422.437548] binder: 25513:25529 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 422.465252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket pig=25524 comm=syz-executor5 03:33:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000fea000)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001d00)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000001d40)={0x7fff, {{0x2, 0x4e21, @rand_addr=0x1}}}, 0x88) [ 422.513402] binder: 25513:25535 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:33:28 executing program 5: sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8957, &(0x7f0000000180)={'ifb0\x00', @ifru_addrs=@llc={0x1a, 0x33f, 0x100000000, 0x0, 0x0, 0xd4, @remote}}) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)="72616d66730026f1729c6a430542f8e4fbeff6c5ef7798c63ae1352c19effe6dbf659369548e80103c80b9de13ced7fb74cc970cf1fb700256f6dbead1f38e5b69d25c23a5d71e77d1a993076b89517fd8f3803cbe0c2e45a4876a124ec9ef992e7c8ab08b86a1311a2b6744ef6be2230b74f92d588cc84d3ad580cd4076bc0d8be3d9b9562cac769b425ddaaedd960540d16ff7747ea761af655268", 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$TIOCSCTTY(r1, 0x540e, 0x497a) sendfile(r0, r1, &(0x7f0000000000), 0x80000002) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x1, 0x1, 0x80000000, 0xfd36, 0x9, 0x1, 0x49, 0x3, 0x4, 0x4}) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/context\x00', 0x2, 0x0) 03:33:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @local}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x9, &(0x7f0000000100)={0x77359400}, 0x10) [ 422.513410] binder: 25513:25535 unknown command 1704546753 [ 422.513418] binder: 25513:25535 ioctl c0306201 20000040 returned -22 [ 422.513633] binder: 25513:25535 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 422.535379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket pig=25549 comm=syz-executor5 [ 422.987935] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 422.995402] FAT-fs (loop6): Filesystem has been set read-only [ 423.008678] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 423.020751] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 423.038789] FAT-fs (loop6): error, invalid access to FAT (entry 0x000001c2) [ 423.074881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket pig=25584 comm=syz-executor5 03:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x80000) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e23, 0xff, @mcast1, 0x1}, {0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4}, 0xff, [0x95, 0x3, 0x3ff, 0x6, 0x2, 0x6, 0x9, 0x3f]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000300)="26d677aaeb151e01e882a8ad90c78a8e8a2455851fd6b9e7de95d6ea6952749b9fd2079426685b626c409202985ed8e4d6fd3495bc01eeebcb1e98c950cea620192541560b9aaaf178c683b32461d9051336f49c3ef028d7c23a2a3947f6f5288240d386d1ec76a6a13a053eecfe3efed0fc6664e5f82095379b353387219c2aa449f23b6506b5ac694e41ec8dfcfb2da0ef9b0346c5b580401c8e4e9d3ddfb9dab07954a6f3f6fbcd374bccd04981b18b32b5a96a32ae9c66db72ee958bbdab178daffa4b9a715f1d588c23c87c75bdf0e43c91798849163075608d5e88910a1fce56f3a0737d0c", 0xe8}, {&(0x7f0000000400)="15b46b90f43b1eb6a29fc4ba5618c0513cb545d53ac896555ba3fbe9e743096e9b54a97b9a243d7cbbec3f161ed7774a4bc5715ab34b643b3af93cdc6352086b5ff97e88d7615a3b4ef923ac60e28e019981df785bcfb7845f35646d1b69b758a3958074bef32a797b1162e8284bc725ec042782a0c213fe835d7910ae40bf599608bec62970348fa309249d518521fa5f35500a396470e93dbb54d6bcf977b54e90300c9e81b30cfcba842893607e8c0ecb63", 0xb3}], 0x2) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000402000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f0441b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516c361f7828235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000107000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) syz_open_procfs(r0, &(0x7f00000000c0)='autogroup\x00') write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000004c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x78) 03:33:29 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000880)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000680)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) sched_setaffinity(r0, 0xffffff51, &(0x7f00000000c0)=0x9) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0xc1) r2 = open(&(0x7f0000000ac0)='./bus\x00', 0x100, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x880, 0x7f, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x400005, 0x3}) mq_unlink(&(0x7f0000000a80)='bdev\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000e00)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000000)) getpeername$unix(r4, &(0x7f0000000800), &(0x7f0000000200)=0x65) mq_timedsend(r3, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r7 = getpid() mq_notify(r3, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r7}) syncfs(r1) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x204100, 0x0) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, &(0x7f0000000240)) r9 = getegid() ioctl$PIO_FONT(r8, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x4) setresgid(r6, r9, r6) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r4) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x6) 03:33:29 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:lastlog_t:s0', 0x20, 'system_u:object_r:sshd_exec_t:s0', 0x20, 0x1ff, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x6c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140), 0x0, 0x0) 03:33:29 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xfffffffffffffdc2}}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8800, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000003c0)) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000020900000000000001000078"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbe72501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb000000000000a7080035f3d17387f7ff84d0e30c22026c46390400000000000000000000000000000000000004000400170000001f000000000700003f0000000000000003000000000000006656ae52928755bfadced2248ed11888937c94a88ba296a61df32c31b27036d6b550bb2efd1aec331e479265a731937983c607107b19addf3c2ad5ad2d3bd911331367bbc876bba5b5e5e6e0eba3a08145d8aa33bce785f1cd001dd942b55555e149c2f8da331a200fab60ed084515837adbbd63d74bac8ffa76502a640fb97c3bfb5689c3d7a4bdf219ed7fc116bae2d683f656a62afd766784968d8df4a8a33c5d54eb47a252c46e75cafb4534c14c67940d3e626b5d89d1e1ae6dd43538ecea42f6c89aa53007c68ad6ade2c3bad04cb7051e89f585a2f1d3f5687593f9896d1b5e9ec499b6dab0036775f646032a"], 0x88}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) 03:33:29 executing program 6: r0 = mq_open(&(0x7f00000000c0)=']\x00', 0x0, 0x0, &(0x7f00000001c0)={0x10000}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000000), 0xfda1, 0xfffffffffffffffe, &(0x7f0000000240)={r2, r3+30000000}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf8, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3d5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x74}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbfc}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000814}, 0x40) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_rr_get_interval(r5, &(0x7f0000000080)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000400)=0x8) 03:33:29 executing program 7: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f") syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a00)={'team0\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001a40)={@empty, @multicast1}, &(0x7f0000001a80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast2, @in=@loopback}}, {{}, 0x0, @in=@dev}}, &(0x7f0000001c00)=0xfffffd26) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001c80)={0x0, @remote, @local}, &(0x7f0000001cc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@local, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001e00)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e40)={0x0, @empty, @multicast1}, &(0x7f0000001e80)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'veth0_to_bridge\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002100)={'team0\x00'}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002140)={0x0, @loopback, @dev}, &(0x7f0000002180)=0xc) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000300)=""/19) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001940)={'ip_vti0\x00'}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000340)={{0x2, 0x7}, {0x6, 0xffff}, 0x5, 0x0, 0x4}) r5 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) creat(&(0x7f0000000180)='./file0/file0\x00', 0x1) read(r1, &(0x7f0000000000)=""/11, 0xb) tkill(r5, 0x2c) [ 423.193214] binder: 25590:25594 Acquire 1 refcount change on invalid ref 0 ret -22 [ 423.209495] binder: 25590:25594 ioctl 8912 400200 returned -22 [ 423.221262] binder: 25590:25594 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 423.304388] binder: 25590:25603 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 423.329203] binder: 25590:25603 unknown command 1704546753 [ 423.346224] binder: 25590:25603 ioctl c0306201 20000040 returned -22 [ 423.355703] binder: 25590:25616 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:29 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x408401) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0xce, "f4b18d1e3a680b9e0bcc1edd2981a9e350acb5f28180b6633f701dd912962b4afe8077ae1d13bcc6b30d384e1be95a87051963570ac4b0a082ec9a58cea5334545bede9a445dec38699c1c4ab5df5712060adfe86decfb917ff291d854128841605ed165293dff0241c6e4bf6700b34a513cc121f4fbbbecdbccc341dd1e1a0db80f8dc83694755da743ba55d36f82d7d034f3715c134d9b61004d05d058d6479d9d29c3b6111b7f19c970e4b54bcddfe4ae8a5e490fcb12fd64523ae1a29bed03c64e16b860c909265f2c238929"}, &(0x7f0000000240)=0xf2) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x101, 0x2000000010000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10202, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e24, @multicast1}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) r3 = gettid() wait4(r3, &(0x7f0000000280), 0x0, &(0x7f00000002c0)) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)) 03:33:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000140)) 03:33:29 executing program 4: timer_create(0xfffffffffffffffe, &(0x7f0000ee4000)={0x0, 0xf, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000200)}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000003140)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000003180)) timer_gettime(0x0, &(0x7f0000000080)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/160) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000180)={0x5, 0xb619ff, 0x0, 'queue1\x00', 0x4}) 03:33:29 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff0000fc}}, 0x20) 03:33:29 executing program 7: membarrier(0xc, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x208100, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x34000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000400)=ANY=[@ANYBLOB='filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d34f00000000000000000000908e9009b67eac00d874b9235e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000"], 0x118) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x40, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x8) fcntl$setpipe(r5, 0x407, 0x5) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) clone(0x4400, &(0x7f0000000700), &(0x7f00000006c0), &(0x7f0000c35ffc), &(0x7f0000000680)) ppoll(&(0x7f0000000200)=[{r0, 0x1100}, {r1, 0x3006}, {r2, 0x200}, {r4, 0x80c0}, {r5, 0x284}, {r6, 0x1}], 0x6, &(0x7f0000000280)={r7, r8+30000000}, &(0x7f00000002c0)={0x3}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) capset(&(0x7f000015eff8)={0x19980330}, &(0x7f000053a000)) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000000)={0x8, 0xb6b7, 0x9, 0x5, 0x5}) 03:33:29 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @remote}, @in=@local}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0xfffffffffffffee7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x721, 0x0, 0x0, {{@in=@rand_addr, @in6=@dev}, {@in=@broadcast, 0x0, 0x833}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) 03:33:29 executing program 2: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f80), &(0x7f0000002fc0)=0xc) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001880)={@loopback, @multicast1, 0x0}, &(0x7f00000018c0)=0xc) sendto$packet(r1, &(0x7f0000000200)="906c163e2be3d09b22214271342c5cdeb43be5b19757cd629f76b7bd1580c9e68a0756e164d5da917e56b03d3cf2c559e766557fa35b1a82c8714bf6f5d68b7a76580bba7d0c8e168307cd96f4a283c7d5540de67e34965d8067956771917d35a1a613b36e30e4fbc72a81d0053ab3d14552f691e205435ebfb17142222472d1b1eb14c1cc3af45c084b9609", 0x8c, 0x80, &(0x7f0000001900)={0x11, 0x0, r2, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000007c0)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000040)) 03:33:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r2 = syz_open_dev$usbmon(&(0x7f0000000b40)='/dev/usbmon#\x00', 0x3, 0x10100) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$RTC_PIE_OFF(r2, 0x7006) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)='fuse\x00', 0x11000, &(0x7f00000009c0)=ANY=[@ANYBLOB="021f00", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',default_permissions,default_permissions,max_read=0x0000000000000007,allow_other,default_permissions,max_read=0x0000000000000006,max_read=0x0000000000000040,blksize=0x0000000000000400,\x00']) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/150) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000200)) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$eventfd(r5, &(0x7f00000002c0), 0x8) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000001c0)=0x6) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000680)={'NETMAP\x00'}, &(0x7f0000000940)=0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x4000200) memfd_create(&(0x7f0000000980)='.[-vmnet0{\x00', 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000240)={0x81, 0x0, 0x0, 0x7bab}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000400)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@ipv4={[], [], @local}, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000b00)={&(0x7f0000000900)=ANY=[]}}, 0x880) write$FUSE_DIRENT(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x150) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 03:33:29 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0xaeb, 0x7, 0x200}) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={"6c6f3a0500", {0x2, 0x0, @rand_addr}}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000280)) write(r2, &(0x7f00000000c0)="2387d9f045d9da10a7c4091e8f6c0bee709ce469f92515a3ca9833574fcad72eaf913f7ab03702057881187a427f45d8d5354d05424ba68f34e82ec22ac2212496c109c2fa95a7d0df71336464adf64973a86a76dd3699afc15aae08fef5c3d7f98a166712879ca899c83d2839092e73fda2c90e0df580ffa2b897f5edfa17d694507aafbeb6761ad4bd8786dd027866d35edf7fdcdbc40311ef6cbe21c3586433e0d0f657f9f46cbd0531a5107669f12dcafe", 0xb3) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/128) [ 423.594775] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop2 [ 423.980079] binder: 25590:25603 Acquire 1 refcount change on invalid ref 0 ret -22 [ 423.988014] binder: 25590:25594 ioctl 8912 400200 returned -22 [ 423.994031] binder: 25590:25616 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 424.004574] binder: 25590:25603 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 424.004579] binder: 25590:25616 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 424.019182] binder: 25590:25603 unknown command 1704546753 03:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c151993612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a3430ad43222b15f1cf521235016d6d33700000000000000000000000000000000"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000300)) 03:33:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x0, 0x7ff, 0x77, 0x6}) r2 = dup(r1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x2, {0x2, 0x4e21, @rand_addr=0x1ff}, 'irlan0\x00'}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x6) getdents(r3, &(0x7f0000000040)=""/205, 0xfffffffffffffe95) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000480)={0xc9b0, 0x0, 0x4, 0x4, 0x401}) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) mq_timedreceive(r3, &(0x7f0000000900)=""/240, 0xf0, 0x1eccb113, &(0x7f00000006c0)={0x77359400}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08002bbd7000fedbdf250700000008000600f7ffffff080005000000000008000600030000000800040005000000240001000800050004000000080001000a000000080006006f76660008000b00736970003400020008000900000000000800080000000000080002004e240000080002004e23000008000500080000000800080034000000"], 0x1}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r3, &(0x7f0000000500)=""/216, 0xd8, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800700000000000000000001"]) ioctl(r4, 0x8916, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000008c0)={@local, r5}, 0x14) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) setresgid(r6, r7, r8) 03:33:30 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f00000001c0)="6574683000818f7221b6e879f8ee3e2100e42ff49239d5ee26d3a43bcc5efec47c046bfc148c6bc61bc78e8afcd90b18ad73f5e570bd63528e1bd76d85687f101a496debd068cd6246399501f7a1e68670665c9766506dce6e492615828b0c926bbc8b794e4bd15fe5ce89aa686ffc", 0x0) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) write$P9_RSTAT(r0, &(0x7f00000000c0)={0x88, 0x7d, 0x0, {0x0, 0x81, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6, 'md5sum', 0x24, '/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x24, '/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}}, 0x88) 03:33:30 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$getregs(0xc, 0x0, 0x1, &(0x7f0000000240)=""/123) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r1, 0x1f) r2 = eventfd(0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x20000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r2, r4, &(0x7f0000000000), 0x1000000008) sync_file_range(r2, 0x3c2f5d7e, 0x1, 0x4) tkill(r0, 0x15) mq_getsetattr(r4, &(0x7f0000000340)={0x95, 0x3, 0xbb3f, 0x5, 0xff, 0x5, 0x6, 0x362}, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) flock(r3, 0x4) connect(r1, &(0x7f00000002c0)=@l2={0x1f, 0x8, {0xc5, 0x9, 0x100, 0x81, 0x5, 0x10000}, 0x3b17, 0x2}, 0x80) ppoll(&(0x7f0000000100)=[{r3, 0x4004}], 0x1, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000200)={0xaa}, 0x8) 03:33:30 executing program 7: membarrier(0xc, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x208100, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x34000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000400)=ANY=[@ANYBLOB='filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d34f00000000000000000000908e9009b67eac00d874b9235e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000"], 0x118) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x40, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x8) fcntl$setpipe(r5, 0x407, 0x5) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) clone(0x4400, &(0x7f0000000700), &(0x7f00000006c0), &(0x7f0000c35ffc), &(0x7f0000000680)) ppoll(&(0x7f0000000200)=[{r0, 0x1100}, {r1, 0x3006}, {r2, 0x200}, {r4, 0x80c0}, {r5, 0x284}, {r6, 0x1}], 0x6, &(0x7f0000000280)={r7, r8+30000000}, &(0x7f00000002c0)={0x3}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) capset(&(0x7f000015eff8)={0x19980330}, &(0x7f000053a000)) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000000)={0x8, 0xb6b7, 0x9, 0x5, 0x5}) 03:33:30 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x4) write(r0, &(0x7f00000015c0)="991525732b32c000e65d4b349f3489b47ef17912b5e8789703886f0719c40253728fc90e6f62a84a97ea7fac42e33d0f81ec78292151134c04a7a1e4c22f67ff5a375c4eff70bdc148e6be05f57cc6b04915ec755db254e2a69853175b299eb5", 0x60) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000001680)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000001740)='nfs\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001640)=0x4, 0x4) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)) r6 = getegid() preadv(r4, &(0x7f0000001580)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/141, 0x8d}, {&(0x7f0000001500)=""/82, 0x52}], 0x3, 0x0) fchown(r3, r5, r6) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8917, &(0x7f0000001700)="667018908e0996c7de2070") r7 = socket$inet6(0xa, 0x2, 0x88) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f00000016c0)=0x6, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) 03:33:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x4, 0x7}, 'port1\x00', 0x40, 0x100000, 0x4, 0x2, 0x40, 0x9, 0xd570, 0x0, 0x6, 0x7e}) write$cgroup_int(r0, &(0x7f0000000240)=0x1, 0x12) sched_yield() ioctl$int_out(r0, 0x96eab9b724835453, &(0x7f0000000000)) preadv(r0, &(0x7f0000000000), 0x100000000000000f, 0x0) getrlimit(0x0, &(0x7f0000000140)) 03:33:30 executing program 2: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f80), &(0x7f0000002fc0)=0xc) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001880)={@loopback, @multicast1, 0x0}, &(0x7f00000018c0)=0xc) sendto$packet(r1, &(0x7f0000000200)="906c163e2be3d09b22214271342c5cdeb43be5b19757cd629f76b7bd1580c9e68a0756e164d5da917e56b03d3cf2c559e766557fa35b1a82c8714bf6f5d68b7a76580bba7d0c8e168307cd96f4a283c7d5540de67e34965d8067956771917d35a1a613b36e30e4fbc72a81d0053ab3d14552f691e205435ebfb17142222472d1b1eb14c1cc3af45c084b9609", 0x8c, 0x80, &(0x7f0000001900)={0x11, 0x0, r2, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000007c0)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000040)) [ 424.024792] binder: 25590:25603 ioctl c0306201 20000040 returned -22 03:33:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x40000005}, 0x3) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400400, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) 03:33:30 executing program 6: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x4ed, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 424.081017] binder: 25683:25690 unknown command 0 [ 424.117766] binder: 25683:25690 ioctl c0306201 20012000 returned -22 03:33:30 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x58) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x1e, 0x37, 0x2, {0x1, 0x80, 0xfffffffffffffda8, r2}}, 0x1e) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1f) 03:33:30 executing program 4: perf_event_open(&(0x7f00000004c0)={0x6, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x30000, 0x0) write$selinux_create(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="73797364656d5f753a6f626a6563745f720401000000000000a4e6a78cafeabbe7c6977c9fcab924d865635f743a17c95f821485ed8304d85ba1ed7b87b16a347064203135003fd5347b6dacb13dd1d95b40c5f3d034653253c215f75c0233314b076ba557c15fff7eff16e6fb70d31c6bba14b67ba3a433d66681d272c7713f0254e7c32a7c4436e32e2552f320ad2774c9411b410ae901fc8441040aae8678f00bb08be79668b762e4c3676472f5d8ea90dc542d6a29ed810056b1dbfab77a"], 0xc0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r5, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000340)=0xffffffffffffff40, 0x211) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20}, 0x248) sendto$inet(r0, &(0x7f0000000200)="139f93ed6746a4f1d7a29f34076b838055f86ad0334cffa1662e76c66630f34b934a6a835d9c69", 0xfdfd, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x9) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x4e20, @rand_addr}, {0x2, 0x4e21}, {0x2, 0x4e20, @multicast1}, 0x44, 0x5, 0x8, 0x0, 0x14000000000, &(0x7f0000000480)='bridge_slave_1\x00', 0x43, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev}, {0x2, 0x4e21, @loopback}, 0x0, 0x6, 0x0, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000008c0)=""/193, &(0x7f0000000280)=0xffffffffffffff05) r6 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) socket(0xa, 0x1, 0x10) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f00000002c0)=""/112) ioctl(r0, 0x20000008911, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x117}}], 0x1, 0x0) [ 424.133483] binder: 25683:25701 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x0, 0x7ff, 0x77, 0x6}) r2 = dup(r1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x2, {0x2, 0x4e21, @rand_addr=0x1ff}, 'irlan0\x00'}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x6) getdents(r3, &(0x7f0000000040)=""/205, 0xfffffffffffffe95) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000480)={0xc9b0, 0x0, 0x4, 0x4, 0x401}) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) mq_timedreceive(r3, &(0x7f0000000900)=""/240, 0xf0, 0x1eccb113, &(0x7f00000006c0)={0x77359400}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08002bbd7000fedbdf250700000008000600f7ffffff080005000000000008000600030000000800040005000000240001000800050004000000080001000a000000080006006f76660008000b00736970003400020008000900000000000800080000000000080002004e240000080002004e23000008000500080000000800080034000000"], 0x1}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r3, &(0x7f0000000500)=""/216, 0xd8, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800700000000000000000001"]) ioctl(r4, 0x8916, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000008c0)={@local, r5}, 0x14) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) setresgid(r6, r7, r8) 03:33:30 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$getregs(0xc, 0x0, 0x1, &(0x7f0000000240)=""/123) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r1, 0x1f) r2 = eventfd(0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x20000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r2, r4, &(0x7f0000000000), 0x1000000008) sync_file_range(r2, 0x3c2f5d7e, 0x1, 0x4) tkill(r0, 0x15) mq_getsetattr(r4, &(0x7f0000000340)={0x95, 0x3, 0xbb3f, 0x5, 0xff, 0x5, 0x6, 0x362}, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) flock(r3, 0x4) connect(r1, &(0x7f00000002c0)=@l2={0x1f, 0x8, {0xc5, 0x9, 0x100, 0x81, 0x5, 0x10000}, 0x3b17, 0x2}, 0x80) ppoll(&(0x7f0000000100)=[{r3, 0x4004}], 0x1, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000200)={0xaa}, 0x8) [ 424.220772] binder: 25683:25690 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 424.233512] binder: 25683:25690 unknown command 916017601 [ 424.242833] binder: 25683:25690 ioctl c0306201 20000040 returned -22 [ 424.253642] binder: 25683:25690 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:30 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getpid() epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') shutdown(r0, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x12800, 0x0) symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x40100, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x1, 0x8, 0xfffffffffffffffb, 0x200}, {0xfff, 0x2, 0x200, 0x18e6}]}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f0000002900)=@xdp, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000003a80)=""/155, 0x9b}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000002780)={'nat\x00', 0x0, 0x0, 0x1f, [], 0x0, &(0x7f00000001c0), &(0x7f0000002740)=""/31}, &(0x7f0000002800)=0x78) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000001300)={0xfffffffffffffffe, {{0x2, 0xfffffffffffffffc, @local}}}, 0xffffffffffffff4b) 03:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) shutdown(r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000440)={0x5, 0x9}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, &(0x7f0000000200)}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) socketpair(0x10, 0x80801, 0x0, &(0x7f00000003c0)) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_newaddr={0x68, 0x14, 0x0, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xff}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) [ 424.366121] binder: BINDER_SET_CONTEXT_MGR already set [ 424.393729] binder: 25729:25735 ioctl 40046207 0 returned -16 03:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x58, 0x0, &(0x7f0000000340)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:30 executing program 6: personality(0x1bb2baf3005ac137) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) 03:33:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x0, 0x7ff, 0x77, 0x6}) r2 = dup(r1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x2, {0x2, 0x4e21, @rand_addr=0x1ff}, 'irlan0\x00'}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x6) getdents(r3, &(0x7f0000000040)=""/205, 0xfffffffffffffe95) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000480)={0xc9b0, 0x0, 0x4, 0x4, 0x401}) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) mq_timedreceive(r3, &(0x7f0000000900)=""/240, 0xf0, 0x1eccb113, &(0x7f00000006c0)={0x77359400}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08002bbd7000fedbdf250700000008000600f7ffffff080005000000000008000600030000000800040005000000240001000800050004000000080001000a000000080006006f76660008000b00736970003400020008000900000000000800080000000000080002004e240000080002004e23000008000500080000000800080034000000"], 0x1}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r3, &(0x7f0000000500)=""/216, 0xd8, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800700000000000000000001"]) ioctl(r4, 0x8916, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000008c0)={@local, r5}, 0x14) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) setresgid(r6, r7, r8) 03:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) shutdown(r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000440)={0x5, 0x9}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, &(0x7f0000000200)}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) socketpair(0x10, 0x80801, 0x0, &(0x7f00000003c0)) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_newaddr={0x68, 0x14, 0x0, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xff}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 03:33:30 executing program 4: r0 = socket(0x213, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004cc0)=0x0) ioprio_set$pid(0x1, r1, 0xffff) r2 = memfd_create(&(0x7f0000000180)='+:,.\x00', 0x2) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000004d00)={0x4, 0x8, 0x15, 0xba7}) recvmmsg(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000100)=@pppoe, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f0000001240)=""/255, 0xff, 0x84bd}, 0x80000000}, {{&(0x7f0000001340)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/205, 0xcd}, {&(0x7f00000014c0)=""/201, 0xc9}], 0x2, &(0x7f0000001600)=""/117, 0x75, 0x2}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001680)=""/219, 0xdb}], 0x1, &(0x7f00000017c0)=""/245, 0xf5, 0x3}, 0x7fffffff}, {{&(0x7f00000018c0)=@hci, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/216, 0xd8}], 0x1, &(0x7f0000001a80)=""/4096, 0x1000, 0x115}, 0x100000001}, {{&(0x7f0000002a80)=@pppoe, 0x80, &(0x7f0000003180)=[{&(0x7f0000002b00)=""/32, 0x20}, {&(0x7f0000002b40)=""/49, 0x31}, {&(0x7f0000002b80)=""/138, 0x8a}, {&(0x7f0000002c40)=""/198, 0xc6}, {&(0x7f0000002d40)=""/226, 0xe2}, {&(0x7f0000002e40)=""/129, 0x81}, {&(0x7f0000002f00)=""/211, 0xd3}, {&(0x7f0000003000)=""/219, 0xdb}, {&(0x7f0000003100)=""/125, 0x7d}], 0x9, &(0x7f0000003240)=""/69, 0x45, 0x1}, 0x4}, {{&(0x7f00000032c0)=@nfc, 0x80, &(0x7f0000003540)=[{&(0x7f0000003340)=""/229, 0xe5}, {&(0x7f0000003440)=""/57, 0x39}, {&(0x7f0000003480)=""/69, 0x45}, {&(0x7f0000003500)=""/32, 0x20}], 0x4, &(0x7f0000003580)=""/4096, 0x1000, 0x3}, 0x2700}, {{&(0x7f0000004580)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004600)=""/154, 0x9a}, {&(0x7f00000046c0)=""/156, 0x9c}, {&(0x7f0000004780)=""/119, 0x77}, {&(0x7f0000004800)=""/106, 0x6a}, {&(0x7f0000004880)=""/196, 0xc4}], 0x5, &(0x7f0000004a00)=""/141, 0x8d, 0x6755}, 0x7}], 0x7, 0x40000100, &(0x7f0000004c80)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r3, &(0x7f0000000200), 0x80000005) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000040)={0x9, 0x9, 0xffff}) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000080)=""/83) 03:33:30 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:33:30 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getpid() epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') shutdown(r0, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x12800, 0x0) symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x40100, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x1, 0x8, 0xfffffffffffffffb, 0x200}, {0xfff, 0x2, 0x200, 0x18e6}]}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f0000002900)=@xdp, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000003a80)=""/155, 0x9b}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000002780)={'nat\x00', 0x0, 0x0, 0x1f, [], 0x0, &(0x7f00000001c0), &(0x7f0000002740)=""/31}, &(0x7f0000002800)=0x78) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000001300)={0xfffffffffffffffe, {{0x2, 0xfffffffffffffffc, @local}}}, 0xffffffffffffff4b) 03:33:30 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x4) write(r0, &(0x7f00000015c0)="991525732b32c000e65d4b349f3489b47ef17912b5e8789703886f0719c40253728fc90e6f62a84a97ea7fac42e33d0f81ec78292151134c04a7a1e4c22f67ff5a375c4eff70bdc148e6be05f57cc6b04915ec755db254e2a69853175b299eb5", 0x60) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000001680)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000001740)='nfs\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001640)=0x4, 0x4) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)) r6 = getegid() preadv(r4, &(0x7f0000001580)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/141, 0x8d}, {&(0x7f0000001500)=""/82, 0x52}], 0x3, 0x0) fchown(r3, r5, r6) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8917, &(0x7f0000001700)="667018908e0996c7de2070") r7 = socket$inet6(0xa, 0x2, 0x88) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f00000016c0)=0x6, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) 03:33:30 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) socket$inet(0x2, 0x3, 0xe2bd) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000280)={0x7, 0x6d, 0x2}, 0x7) bind(r0, &(0x7f0000000140)=@nfc_llcp={0x27, 0x1, 0x1, 0x5, 0x6, 0x3ff, "50e114ffb81b788d22c17e60e0d1f24d15813afa9e43c7fe8859d41a5d28941d2eadc679bbdc0e91010a69c87126a60fda1730b858f9f4f645fc958c385087", 0x36}, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000200)) r4 = getpgid(0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x5}) r5 = gettid() setpgid(r4, r5) 03:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) shutdown(r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000440)={0x5, 0x9}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, &(0x7f0000000200)}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) socketpair(0x10, 0x80801, 0x0, &(0x7f00000003c0)) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_newaddr={0x68, 0x14, 0x0, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xff}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 03:33:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000080)=0x7fffffffffe, 0x4) sendmmsg(r0, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001500)}}, {{&(0x7f0000000200)=@vsock, 0x80, &(0x7f0000002900), 0x0, &(0x7f00000029c0)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4200, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000280)="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", 0x1000) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000000c0)=0x8b) 03:33:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000000000007c91d2b5629c78aab9930000000000000000"], 0xc}}], 0xb, 0x0) [ 424.895477] binder: 25754:25763 Acquire 1 refcount change on invalid ref 0 ret -22 [ 424.928283] binder: 25754:25763 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) shutdown(r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000440)={0x5, 0x9}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, &(0x7f0000000200)}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) socketpair(0x10, 0x80801, 0x0, &(0x7f00000003c0)) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_newaddr={0x68, 0x14, 0x0, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xff}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 03:33:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x3}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) creat(&(0x7f0000000200)='./file0\x00', 0x2) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x8, 0x4, 0x6}, 0x7a6}}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x1ffffffff) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000340)=0x20) 03:33:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x0, 0x7ff, 0x77, 0x6}) r2 = dup(r1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x2, {0x2, 0x4e21, @rand_addr=0x1ff}, 'irlan0\x00'}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x6) getdents(r3, &(0x7f0000000040)=""/205, 0xfffffffffffffe95) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000480)={0xc9b0, 0x0, 0x4, 0x4, 0x401}) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) mq_timedreceive(r3, &(0x7f0000000900)=""/240, 0xf0, 0x1eccb113, &(0x7f00000006c0)={0x77359400}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08002bbd7000fedbdf250700000008000600f7ffffff080005000000000008000600030000000800040005000000240001000800050004000000080001000a000000080006006f76660008000b00736970003400020008000900000000000800080000000000080002004e240000080002004e23000008000500080000000800080034000000"], 0x1}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r3, &(0x7f0000000500)=""/216, 0xd8, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800700000000000000000001"]) ioctl(r4, 0x8916, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000008c0)={@local, r5}, 0x14) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) setresgid(r6, r7, r8) 03:33:31 executing program 1: getuid() stat(&(0x7f0000002e40)='.\x00', &(0x7f0000002e80)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003440)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004880)={{{@in=@multicast1, @in=@dev}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000004980)=0xe8) inotify_init() lstat(&(0x7f0000004a80)='./file0\x00', &(0x7f0000004ac0)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000012c0)='/selinux/enforce\x00', 0x500ff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009480)) openat$selinux_member(0xffffffffffffff9c, &(0x7f000000abc0)='/selinux/member\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000000ac00)='/dev/ptmx\x00', 0x189000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000000ad80)={{{@in6=@mcast2, @in=@broadcast}}, {{}, 0x0, @in6=@loopback}}, &(0x7f000000ae80)=0xe8) getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f000000af40)={&(0x7f0000000140), 0xc, &(0x7f000000aa80)=[{&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f000000aec0)=[@rights={0x10}, @cred={0x20}], 0x30}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000280)={0x1000, ""/4096}) gettid() mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) [ 425.048410] binder: 25754:25791 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 425.064840] binder: 25754:25791 unknown command 1704546753 [ 425.100813] binder: 25754:25807 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 425.100823] binder: 25754:25807 unknown command 0 [ 425.100832] binder: 25754:25807 ioctl c0306201 20000380 returned -22 [ 425.197015] binder: 25754:25791 ioctl c0306201 20000040 returned -22 03:33:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="00ba67d9ac79dfbb"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c6300fd756620dfc07e9700"], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000300)=0x400) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="2b00000000001b207f5c5eeb08004500005800000000002f9078ac1414572c1414aa043e880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], &(0x7f0000000000)) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x200, 0x7f, 0x0, 0x7f, 0x0, 0x8000, 0x20000, 0x7, 0x75, 0x0, 0x80000000, 0x80000001, 0x1, 0x100000000, 0x7, 0x7, 0x6, 0xfb, 0x4, 0x200, 0xff, 0x1, 0x0, 0x4, 0x5, 0xbd3, 0x5, 0xaaff, 0x100, 0x848b, 0x5, 0x7fff, 0x3, 0x3, 0x73, 0x2, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040), 0xc}, 0x5, 0x3ff, 0x7fffffff, 0x0, 0x6, 0x10000, 0x2}, 0xffffffffffffff9c, 0xb, 0xffffffffffffff9c, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffffffffffffff0d) 03:33:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000001140)=[{&(0x7f0000002180)=""/4096, 0x713}], 0x1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x400000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) ioctl$int_in(r2, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x88) r5 = dup2(r2, r3) fcntl$setown(r5, 0x8, r1) tkill(r1, 0x16) 03:33:31 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000002c0), 0x4) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000300)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) ioctl(r1, 0x90, &(0x7f00000001c0)="ad0623e07fa524440b9ed73d6a6c57973dcdac0fc9c464f41008ddc81233cc1d7c05d3b302b8c444c61ed6cd8241a924738eb49035b43fe4d6bb64c3b743e046a8d16fdc45520eac791b1961053c49c6a889edf1a7b872fa8e6cf6072958e572f62796204f65ad76b764a1d94d28a5058af946afeb4b7bf25861d399ee3b309afff659a817a7569a8774631015ecab9f29a6ed7d58ea5ca9c664e88718383f8214311cb6375b887591d28a43f5965fb4b08c47f1fdd5c4af624f0f15a5af953f207163fabf903518121be12927d0f341d8034827f260db40515b5fc9e5b165b912224a94e0") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)=ANY=[]) 03:33:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000002c0)={0x100000001, 0x9, 0x3, 0x100, 0x8001, 0x9ef}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000200)=0x7ff, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, &(0x7f0000000240), r3, &(0x7f0000000280), 0x8, 0x0) openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x8) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 03:33:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', r1}) getsockname(r0, &(0x7f0000000240)=@ethernet={0x0, @dev}, &(0x7f00000002c0)=0x80) socket$unix(0x1, 0x2, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000340)=0xa3) r3 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r3) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x9) socket$unix(0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000400)='./file0\x00', 0x8) epoll_create(0xfffffffffffffffd) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x105, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) ioctl$KDSETLED(r4, 0x4b32, 0x3ff) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000580)) ioctl$VT_ACTIVATE(r4, 0x5606, 0x6) mkdir(&(0x7f00000005c0)='./file0\x00', 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x200, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000640)={'HL\x00'}, &(0x7f0000000680)=0x1e) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f00000006c0)={{0x2, 0x4e23, @multicast2}, {0x306, @remote}, 0x40, {0x2, 0x4e20, @local}, 'veth1_to_bridge\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x14000, 0x0) syz_open_dev$sndseq(&(0x7f0000000780)='/dev/snd/seq\x00', 0x0, 0x10000) ioctl$KDADDIO(r4, 0x4b34, 0x3f) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000007c0)=@hopopts={0x73, 0x9, [], [@hao={0xc9, 0x10, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, @jumbo={0xc2, 0x4, 0xb9}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x200}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x1}]}, 0x50) epoll_create(0x9) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/member\x00', 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@gettaction={0x2c, 0x32, 0x700, 0x70bd2b, 0x25dfdbfd, {0x0, 0x8001, 0x1}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x4, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:33:31 executing program 7: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x30d, 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)=""/2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x81, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 03:33:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), &(0x7f0000000100)=0xfffffffffffffd5f) 03:33:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$VT_RELDISP(r1, 0x5605) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x3, 0xfffffffffffffffe, 0x1000, 0xe6, 0x1000}, 0x14) r2 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000080)='./control\x00', 0x0, 0x0) faccessat(r2, &(0x7f000003b000)='./control\x00', 0x2, 0x0) lstat(&(0x7f0000000200)='./control\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='9p\x00', 0x1020000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}, {@afid={'afid', 0x3d, 0x10000}}, {@posixacl='posixacl'}, {@loose='loose'}, {@access_any='access=any'}, {@cache_fscache='cache=fscache'}, {@posixacl='posixacl'}, {@access_uid={'access', 0x3d, r3}}]}}) removexattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=@known='security.evm\x00') 03:33:31 executing program 2: mkdir(&(0x7f0000000500)='./file0\x00', 0x45) mount(&(0x7f0000000480)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@dev, @in6=@local}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001d80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002ec0)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@loopback}}, &(0x7f0000002e00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002fc0)={{{@in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000002e40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x104010}, 0xc, &(0x7f0000003280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="00c9e05fd3d5a201ff1a7a316fdb92e3668d5802910fd02b3f7b9755b4a2d2d3b7c8ae5fe9f288ee03f02916e66f571f178abf3a5b4bd349a6"], 0x14}}, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) r1 = getpid() ioprio_get$pid(0x0, r1) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00008a9000/0x3000)=nil, 0x3000, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x5010, &(0x7f0000000380)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x0) accept(r2, &(0x7f00000003c0)=@generic, &(0x7f0000000200)=0x80) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 03:33:31 executing program 7: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000280)={0x18, 0x1, 0x0, {0x3}}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x1, 0xffffffffffffffff) splice(r2, &(0x7f0000000080), r3, &(0x7f00000000c0), 0x1, 0x0) r4 = inotify_init1(0x0) r5 = syz_open_dev$loop(&(0x7f0000002a80)='/dev/loop#\x00', 0x0, 0x20000) fcntl$setstatus(r3, 0x4, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x100, 0x90) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES64=r2, @ANYRES32=r2, @ANYRES64=r6, @ANYPTR64=&(0x7f0000000980)=ANY=[@ANYRESOCT=r7, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYPTR, @ANYRESHEX=r1, @ANYRES64=r7, @ANYPTR, @ANYPTR], @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRES64=r3, @ANYBLOB="57110021dd788644bab6d47f3d2a0acb79da6f6edfb263282023bba27a9a773d584294c9de99135b3fa5273b4cb06054602b3944f6ada046e674eb8ff4bd69cd0b86c6968ff9f1343290765190898967e33eb3e770bbb168da7ca7ab30e5475ef07c61d2c24db8e889ae4c60d085f05e0e2c76826c772e8c74d8f393d899f10ef45f04ac9567799ae16a89fbf4293b2a51ba9934ffb36ace9927147a4e11a4d12a4bec28a0ac3ca4407ed7eea56de3a8453a11ccdef4afc557304d7bc42684d1e316ff031bd91e2480a89bfe7bc79f969be10ae3", @ANYPTR, @ANYRES64=r8, @ANYRESHEX=r2]], @ANYRESDEC=r4, @ANYPTR=&(0x7f0000000cc0)=ANY=[@ANYRES16=r4, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYBLOB="b3c1ed39ffd2d816b8e163175ada759290268c6dd2d30e621fab70104dff50aa58f1c3ae0c5cd1ed46da8356ba86cf18b7fd441d591c45f41e465d7fbab3b9e51f09e7fb7eddb2612004b374fc0c888fd39fa271102a7af903b10ab15afac83c071408059bb43b2f42b4cad183c04e24f26e84b2465f9c7f1476ba12b2e407b2de5dd5e54ccde71d0b45d1a0ab1529a06c0047a718"], @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYPTR, @ANYPTR, @ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="34ff64d1991592c3a3e1c7f72d514cba6c2d7cc91b78733f9824cde120272ee092a6aaae8e2a2ca98cee36501aee0909e02a6e24a16381caba750d4ee8f369111ec234e57e6793e87c8f2fe93c1dc74e9cbd69a45f4debd7dbcdc4854b07d9d45607053a5daa5d7cc66bb83aec4f35aa226cdd33b1e3b405fd1990be513db0a5420bd7b0d8b5c182c52b062040bab3ee96ccb714c063ae9f3413ece17173cb12e8126e092bb3050eff8e7e1480e166632c2a8033"], @ANYRESOCT=r3, @ANYRES16=r8], @ANYPTR64=&(0x7f0000000e40)=ANY=[@ANYPTR=&(0x7f0000000d00)=ANY=[@ANYRES16=r5, @ANYBLOB="884a0fadca1a9eccddf392f8c3c4a038325d8c4d5b440b20f29fc3e5e1425db06d0dec5b767e01973a8b9dc5a7610315551b5973af08a3d5faef16a8f0e96790db23299f1c2b871f7bde9d0dfd2347a923744c5dba9d89a02eb4e375e7c81b55f60f5eaf1c079b1badd287663795540362b77afd72d9afd511fa7d5ae3abff2cbde17390cf13cd4ac81d3bd0311d36e57d1eae5f90a80618b0adecb415789685dd28031740250ca5c906ca43e46f7a9c2bae750a38d6e12f8fc16d16cfc9c2b372ae537d6019610c10033e2f9f1321efbf1cab5fc61429ecd46c523e6b0009ecaeb4911e9bc1c07bb71452b97c1b0e8d978e338a246581d2", @ANYPTR64, @ANYRESHEX=r8, @ANYRESDEC=r2, @ANYRES32=0x0], @ANYRES16=r5], @ANYRES32=r8], 0x9) r9 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) bind(r2, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2711}, 0x80) pread64(r3, &(0x7f0000002b40)=""/172, 0xac, 0x0) r10 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r10, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000140)={0xa, 0x0, 0x1}) ioctl$EVIOCSABS20(r10, 0x401845e0, &(0x7f00000002c0)={0x0, 0x0, 0x70000, 0x4, 0x0, 0x6e371b8c}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000002ac0)={0x9, 0x3}) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) sendfile(r9, r9, &(0x7f0000000000), 0x2000005) fcntl$setownex(r9, 0xf, &(0x7f0000000180)={0x2}) 03:33:31 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x2000000089f0, &(0x7f0000000100)={"73697430000202000340000040000060", @ifru_data=&(0x7f0000000300)="287df095e3a65b483b39b63e2761201382ba5647140f57b5129126f93118924e"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000600)={0x0, 0x12}, &(0x7f0000000580)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000280)="b69347678cf4b30f285fbfa179f9b98fbf9cd567567a76808713fc4d12c9ff43739169f498e8af5fa9ebc72ef83186c4eeff02e3cdabf3ebc46d8590cd25056985a29750d75a043178a85f520dc7931c40407b5d54f8774e0511a4dd", 0x5c) close(r0) r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x4ae42eff587a559f) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000200)=0x82) getpeername(r0, &(0x7f0000000080)=@l2, &(0x7f0000000140)=0x80) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x80080, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000340)={0x18, 0x0, 0x5, {0x7}}, 0x18) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1a, r2, 0x1, 0xffffffff00000000}, 0x14) inotify_init() [ 425.730863] binder: 25830:25835 Acquire 1 refcount change on invalid ref 0 ret -22 [ 425.746855] EXT4-fs (loop6): Unrecognized mount option "­#à¥$D ž×=jlW—=ͬÉÄdôÝÈ3Ì|Ó³¸ÄDÆÖÍ‚A©$sŽ´5´?äÖ»d÷CàF¨ÑoÜER¬ya0x0}, &(0x7f0000000180)=0xc) r2 = syz_open_procfs(r1, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0xcd73) sendfile(r0, r2, &(0x7f00000000c0), 0x200080000004) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000003800)={@local, 0x0}, &(0x7f0000003840)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000003880)={@mcast2, 0x4c, r3}) 03:33:31 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x8) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000240)="d1c5d3733634b0dac4771a69f63d5e99ff01f692edf8b476e739d8dccd46bc2245130754aca42f5c5cc0b810d3230fdd9f3e8f3040c4aee32f17822b7f3491fea832cf423cf9f0484a482dca8dcc5d7dc54ffefbb60194d9ae38dc4627947206434a58120ee50779fb680749fcdce8f9413f7b4238883df53f245b5197192054041fbbbbb9bb1e70af9981d4744bce396e2db2f07012d96ff8545d0221c0ff5014286bf21f45c0f86373fdd7e0a371817b6939fbefd030faebc2d1fd14c196a0bf456cf927bf45cf31d6bdaadfd2c22b267c71", 0xd3) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x17, "e2ea360fd8ede10afdb7ec1045327a4ef21b717d764601"}, &(0x7f0000000040)=0x3b) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f00000000c0)=0x204) ioctl$TIOCCONS(r2, 0x541d) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) [ 425.795236] binder: 25830:25847 ioctl c0306201 2000dfd0 returned -22 [ 425.819172] binder: 25830:25847 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 425.819179] binder: 25830:25847 unknown command 1704546753 [ 425.819188] binder: 25830:25847 ioctl c0306201 20000040 returned -22 [ 425.819701] binder: 25830:25847 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 425.827765] EXT4-fs (loop6): Unrecognized mount option "­#à¥$D ž×=jlW—=ͬÉÄdôÝÈ3Ì|Ó³¸ÄDÆÖÍ‚A©$sŽ´5´?äÖ»d÷CàF¨ÑoÜER¬ya0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') setns(r0, 0x0) 03:33:32 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0xfffffffffffffffd, 0x2}}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in=@local}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000080)=0xe8) pipe2(&(0x7f0000000000), 0x800) dup2(r0, r1) 03:33:32 executing program 5: r0 = signalfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8) signalfd4(r0, &(0x7f0000000040)={0xfffffffffffffff7}, 0x8, 0x80800) 03:33:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)=""/170) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002740)={{{@in=@local, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000002840)=0xe8) creat(&(0x7f0000001380)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) write$selinux_create(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[{}], 0x1) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=ANY=[]) socket(0x0, 0x0, 0x0) 03:33:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) poll(&(0x7f0000000100)=[{r3, 0x8016}, {r2, 0x4088}, {r0, 0x45}, {r3, 0x4}], 0x4, 0x97a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f00000004c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000004c0)=0x8000) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipmr_delroute={0x2c, 0x19, 0x0, 0x70bd27, 0x25dfdbfb, {0x80, 0x90, 0x0, 0xfffffffffffffff8, 0xfd, 0x3, 0x0, 0xf, 0xa00}, [@RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_MARK={0x8, 0x10, 0xf1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x80) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffebe, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:32 executing program 2: mkdir(&(0x7f0000000500)='./file0\x00', 0x45) mount(&(0x7f0000000480)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@dev, @in6=@local}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001d80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002ec0)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@loopback}}, &(0x7f0000002e00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002fc0)={{{@in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000002e40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x104010}, 0xc, &(0x7f0000003280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="00c9e05fd3d5a201ff1a7a316fdb92e3668d5802910fd02b3f7b9755b4a2d2d3b7c8ae5fe9f288ee03f02916e66f571f178abf3a5b4bd349a6"], 0x14}}, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) r1 = getpid() ioprio_get$pid(0x0, r1) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00008a9000/0x3000)=nil, 0x3000, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x5010, &(0x7f0000000380)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x0) accept(r2, &(0x7f00000003c0)=@generic, &(0x7f0000000200)=0x80) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 03:33:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0], 0xfed3) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, &(0x7f0000000300)) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) lseek(r2, 0x4, 0xffffffffffffffff) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 03:33:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x3f}, 0xf) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x100000000000001e}, 0xe) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 426.629019] binder: 25904:25907 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000300)='./file1\x00', 0x200002, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000005c0)={0xff, 0xd119}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) eventfd(0x11) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fchdir(r0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4000) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r2, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000140)='gretap0\x00', 0xff}) 03:33:32 executing program 6: r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[]}}, 0x0) 03:33:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x541b, &(0x7f00000000c0)) 03:33:32 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x2000000089f0, &(0x7f0000000100)={"73697430000202000340000040000060", @ifru_data=&(0x7f0000000300)="287df095e3a65b483b39b63e2761201382ba5647140f57b5129126f93118924e"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000600)={0x0, 0x12}, &(0x7f0000000580)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000280)="b69347678cf4b30f285fbfa179f9b98fbf9cd567567a76808713fc4d12c9ff43739169f498e8af5fa9ebc72ef83186c4eeff02e3cdabf3ebc46d8590cd25056985a29750d75a043178a85f520dc7931c40407b5d54f8774e0511a4dd", 0x5c) close(r0) r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x4ae42eff587a559f) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000200)=0x82) getpeername(r0, &(0x7f0000000080)=@l2, &(0x7f0000000140)=0x80) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x80080, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000340)={0x18, 0x0, 0x5, {0x7}}, 0x18) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1a, r2, 0x1, 0xffffffff00000000}, 0x14) inotify_init() 03:33:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000001a40)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") syz_open_procfs(r3, &(0x7f00000019c0)='net/snmp\x00') sendfile(r2, r0, &(0x7f0000001900), 0x4) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r5 = getegid() fchown(r4, 0x0, r5) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000001980)='./file0\x00', &(0x7f0000001a00)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r6, &(0x7f0000001940)=0xffffffd, 0x8) fstatfs(r0, &(0x7f00000001c0)=""/216) [ 426.787755] binder: 25904:25907 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 426.795035] binder: 25904:25907 unknown command 1704546753 [ 426.804466] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 426.847922] device lo entered promiscuous mode [ 426.853850] device lo left promiscuous mode [ 426.885674] binder: 25904:25907 ioctl c0306201 20000040 returned -22 03:33:32 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0) write$P9_RLERROR(r0, &(0x7f0000000200)={0x13, 0x7, 0x1, {0xa, '/dev/null\x00'}}, 0x13) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x5, 0x3, 0x100000000}}, 0x28) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r2 = socket$packet(0x11, 0x808000000001, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/create\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) write$P9_RREADLINK(r0, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000240)=""/44) 03:33:32 executing program 2: prctl$intptr(0x10080023, 0x800) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') 03:33:33 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffc) r1 = dup3(r0, r0, 0x80000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0x0, 0x1, {{0x7fffffff, 0x7, 0x1, r2}}}, 0x28) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000000e80001040000040d001400ea1100000005000000", 0x29}], 0x1) 03:33:33 executing program 1: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f0000000700)='./bus\x00', 0xc1) r1 = open(&(0x7f0000000ac0)='./bus\x00', 0x100, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000000a80)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)) ioctl$sock_proto_private(r4, 0x89e1, &(0x7f0000000000)) getpeername$unix(r3, &(0x7f0000000800), &(0x7f0000000200)=0x65) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r5 = getpid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r5}) syncfs(r0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000500)={0x5, 0x5, 0x4, 0xffffffff, 0x101, 0x81, 0x5, 0x9, 0x80, 0xc, 0x2, 0x8000}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x204100, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000240)) getegid() ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x4) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r3) syz_open_procfs(r5, &(0x7f0000000600)='smaps\x00') setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x6) 03:33:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000140)='md5sumbdev.vmnet1lo\x00', 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000003c0)={0x7f, 0x10000, 0xffffffffffff058e, 0x800, 0x33666b65, 0x3}) pwrite64(r1, &(0x7f000003bfff)='9', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000180)='./file0\x00') setsockopt$inet_int(r1, 0x0, 0x3f, &(0x7f0000000100)=0x400, 0x4) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f00000002c0)='./file0\x00', 0xcc25, 0x1, &(0x7f0000000340)=[{&(0x7f0000000300)="67a68a46aff299b94e6a01f1f25a45ab8745675e2db49a36928cf83d812043d5f57863ee4c", 0x25, 0xfff}], 0x90000, &(0x7f0000000380)={[{@ssd='ssd'}, {@nossd='nossd'}, {@autodefrag='autodefrag'}]}) r2 = creat(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000001c0)=ANY=[@ANYBLOB="82ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b0a0000000000000000000000000000000000000000000000000000ffe400000000000000000000000000000000000000000000"]) 03:33:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x148, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x0, 0x0, &(0x7f00000003c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) [ 427.493233] binder: 25985:25987 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:33 executing program 1: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f0000000700)='./bus\x00', 0xc1) r1 = open(&(0x7f0000000ac0)='./bus\x00', 0x100, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000000a80)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)) ioctl$sock_proto_private(r4, 0x89e1, &(0x7f0000000000)) getpeername$unix(r3, &(0x7f0000000800), &(0x7f0000000200)=0x65) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r5 = getpid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r5}) syncfs(r0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000500)={0x5, 0x5, 0x4, 0xffffffff, 0x101, 0x81, 0x5, 0x9, 0x80, 0xc, 0x2, 0x8000}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x204100, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000240)) getegid() ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x4) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r3) syz_open_procfs(r5, &(0x7f0000000600)='smaps\x00') setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x6) [ 427.560885] binder: 25985:25992 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 427.652719] binder: 25985:26000 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 427.660571] binder: 25985:26000 unknown command 1704546753 [ 427.666716] binder: 25985:26000 ioctl c0306201 20000040 returned -22 [ 427.675546] binder: 25985:26000 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:33 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x800, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000280)={0xfffffffffffff35d, 0x0, 0x3}) getsockname$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000003c0)=0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) getsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100), &(0x7f0000000340)=0x4) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) dup2(r4, r2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x220, 0x4) 03:33:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5}}, 0xfffffffffffffffe) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x820c0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x17, &(0x7f0000000180)=""/227, &(0x7f0000000280)=0xe3) sendmsg$nl_netfilter(r1, &(0x7f00000025c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400006}, 0xc, &(0x7f0000002580)={&(0x7f0000002600)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x440c0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:33:33 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x2000000089f0, &(0x7f0000000100)={"73697430000202000340000040000060", @ifru_data=&(0x7f0000000300)="287df095e3a65b483b39b63e2761201382ba5647140f57b5129126f93118924e"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000600)={0x0, 0x12}, &(0x7f0000000580)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000280)="b69347678cf4b30f285fbfa179f9b98fbf9cd567567a76808713fc4d12c9ff43739169f498e8af5fa9ebc72ef83186c4eeff02e3cdabf3ebc46d8590cd25056985a29750d75a043178a85f520dc7931c40407b5d54f8774e0511a4dd", 0x5c) close(r0) r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x4ae42eff587a559f) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000200)=0x82) getpeername(r0, &(0x7f0000000080)=@l2, &(0x7f0000000140)=0x80) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x80080, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000340)={0x18, 0x0, 0x5, {0x7}}, 0x18) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1a, r2, 0x1, 0xffffffff00000000}, 0x14) inotify_init() [ 427.711326] device lo entered promiscuous mode 03:33:33 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0xfffffffffffffffc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2d) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) keyctl$describe(0x6, 0x0, &(0x7f0000000680)=""/57, 0x39) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x2000c884, &(0x7f0000000140)={0x2, 0x200000004e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = getpid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000440)=[0x0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) sendmsg$unix(r1, &(0x7f0000000500)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000002c0)="2dc77f0c308f73a7e7ce10e940214c6e083b8980cb0110cd33a66ab858d51ffa9bb5b0a6fd03e62f3fa9e7ccdf2b0c60ca65673d7f906bc001c6e264c2d3e109c66e848b22811f136ab0b085c020208ac3b4cbec652054f641d77ca56ea4de9b22b735095476778246a9a7ec5edc1510b78c6cc9b3cf83957c84431c8c926e4409e64393ca13ab05464e0fb9baa787170583810de6daa0eb79424601cfc9795d71792059bcec765cf0ca78adae441bf103e0416d0fcd", 0xb6}], 0x1, &(0x7f0000000480)=[@rights={0x18, 0x1, 0x1, [r2, r0]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r2]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x58, 0x4000000}, 0x10) getpgrp(0xffffffffffffffff) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x40c0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f00000007c0)="4ec4f6db8603ffe70a8b370ca331c9cf3d26f3145f10b9d5cfa0aac26e01ceb0dee19cb50bb95e46a0222d424168344ef79e99187547170644b602b7ccfbcafe213cbbe27521ec3330bf883ad483d9480ac26214d80ae741c20f9688477fea1a8408a266bea8ea28af6b2cd54b2e4eea2283d695d34b2272f6e46f139c106dc5b7950e50bfb6ad5c0ca1910c4982b7ac5b66de366fe14d08fefcfee8a0", 0x9d) sendto(r1, &(0x7f00000006c0)="1872e34261d13f3c37f9cda522793cf9311af2b9c09c323d296af3adbdee41e74a1a4d0625fec717f1fd12fba841c026d0f422d2960449dc4ac09c3174471360b8492704bc5d68fb719df1b538e7c90824a8780a5fc82d952b41ff192edd7d935bc2b7de92bcf64e344f64a9d257d046fce905a080cfe828c5ea59f25255ba99b9f317a40caf8ac3d7fa81c7ee28fcc7586065866fb5344f7b9e983074712738fb0dcbadae5ae08accbe50201db0d1550f569e137c41aa3f2c400c6af921955d6d830a13", 0xc4, 0x8000, &(0x7f00000005c0)=@sco={0x1f, {0x9, 0x2, 0x8, 0x1, 0x40, 0x6}}, 0x80) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 427.732290] device lo left promiscuous mode 03:33:33 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x20002000}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@loopback, 0x5c}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) tee(r0, r2, 0x3b5a, 0x9) dup2(r0, r1) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={&(0x7f0000000100), 0xc, &(0x7f00007a8000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000001000000010000000000000000010007007629dba937525b6d725f5769b762197edcf28b9dc09c7e84bfc05cb2d674a3899d018ae5dabc02cccd0046075b3dbb12a9cccce675d4806cc3c6608659057debdc208d8752b4c920680916eeb02c9e5e0b5060ab108da1a6c88edfcdb96025a49f7675e9b2ad89f0daf827186ad60733625857a89c2cd55104ce0c64393edc0e03c6d47f5dca4ca618aa9578f1548ba46af3c69d6b0a52b031a0d5b03875c8f5f5217ae35f3cc3eaa4124aa4ee0c3a34aa52095405b529c962b8f6ccaf7eb63b2cde3ebded5474b73e9e54f047eda2"], 0xe3}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x200, 0x0) fcntl$setflags(r2, 0x2, 0x1) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x101) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)={0x2}) 03:33:33 executing program 1: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f0000000700)='./bus\x00', 0xc1) r1 = open(&(0x7f0000000ac0)='./bus\x00', 0x100, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000000a80)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)) ioctl$sock_proto_private(r4, 0x89e1, &(0x7f0000000000)) getpeername$unix(r3, &(0x7f0000000800), &(0x7f0000000200)=0x65) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r5 = getpid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r5}) syncfs(r0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000500)={0x5, 0x5, 0x4, 0xffffffff, 0x101, 0x81, 0x5, 0x9, 0x80, 0xc, 0x2, 0x8000}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x204100, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000240)) getegid() ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x4) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r3) syz_open_procfs(r5, &(0x7f0000000600)='smaps\x00') setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x6) 03:33:33 executing program 4: mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x80000001, 0xf2, 0x7, 0x8, 0x0, 0x20, 0x2000, 0x1, 0x401, 0x0, 0x1666a9d5, 0x9, 0x6, 0xaa6, 0x8, 0x1, 0x0, 0x5ed, 0x7fff, 0x1, 0x0, 0x0, 0x7, 0x3, 0x0, 0x101, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x400000000000000, 0x8, 0x40, 0xfffffffffffffc00, 0x5, 0x7, 0x6, 0x4, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0x7}, 0x40, 0xffff, 0x8001, 0x0, 0xe1a, 0x2, 0x1000}, r0, 0xd, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r1, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000180)={0xf}, 0xf) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14}]}, 0x34}}, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) keyctl$set_reqkey_keyring(0xe, 0x2) rt_sigaction(0xf, &(0x7f0000000140)={0x3, {0xfffffffffffffff9}, 0x4, 0xfffffffffffffffb}, &(0x7f00000001c0), 0x8, &(0x7f0000000200)) dup(r3) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 03:33:33 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x8, 0xfffffffffffffffe, @ipv4={[], [], @local}}, 0x1c) write$binfmt_elf32(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfdef) fcntl$setflags(r0, 0x2, 0x1) 03:33:33 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x800, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000280)={0xfffffffffffff35d, 0x0, 0x3}) getsockname$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000003c0)=0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) getsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100), &(0x7f0000000340)=0x4) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) dup2(r4, r2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x220, 0x4) 03:33:34 executing program 2: r0 = dup(0xffffffffffffffff) recvfrom$inet6(r0, &(0x7f00000002c0)=""/132, 0x84, 0x10100, &(0x7f0000000400)={0xa, 0x2, 0x8, @empty, 0x1000000b}, 0x1c) mkdir(&(0x7f0000000240)='./file0\x00', 0x28) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x100000000000088) write$FUSE_STATFS(r1, &(0x7f0000000100)={0x60, 0xfffffffffffffffe, 0x2, {{0x2, 0xffff, 0x4, 0x1f, 0x9, 0xfffffffffffffffb, 0x200, 0x1ff}}}, 0x60) r3 = socket$inet6(0xa, 0x1000002000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") timerfd_gettime(r1, &(0x7f00000003c0)) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x19, 0x5}, &(0x7f0000000380)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) ptrace$cont(0x18, r5, 0x2, 0x28) timer_getoverrun(r4) r6 = timerfd_create(0x0, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000440)) timerfd_gettime(r6, &(0x7f00000000c0)) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) socket$inet6(0xa, 0x802, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x80000000004e21, 0xfffffffe, @ipv4={[], [], @rand_addr=0x3}, 0x8}, 0x1c) r8 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r8, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) writev(r8, &(0x7f0000000700)=[{&(0x7f0000000000)="18d612456599d04f570a20b8369b50e49a0aa5b6c8fd3cfe98c4181c378dee94ef6b5b13970d2a7944c5d5f8c2d1128d98540ef3011954028c0673e2a28dbb71ae6cbf52e08c9d322bcf98c4b902ea5126022882a8883a00c02c2125a88f2548d29918a256332f6f8edeb96c220dd4e4e11e989730fad9ea00c13d1180e6d10c4063cf88d0e1ac448f111bd6c9ce63a509995ffd56166e429b1acf26fafced2b414dc6f1c9e7c02e6428e9857137074912604598b2ebfe3bbf2fbd", 0xbb}], 0x1) 03:33:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_getres(0x3, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000001c0)="b9e66388603913a7acc50a7c13be9a2bf98b1a5bba1059b40d3c7b45d99588d8ed0b17c2cbdf614887779581b69bd65562ca108ca955d35570ee798aa78432b7fa7c5798195c8dbf6143cb43e19649e54ab65900645568530a11f475f25fc730086778369f56202cb4cb345bfd06235080954b6607839cb361646423016401d90ed34d3e502916", 0x87}], 0x1, 0x0, 0x0, 0x40010}, 0x24000010) 03:33:34 executing program 7: openat$uinput(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/uinput\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) fstat(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)="9c4feffab32d859b7b16acf3ac14195f375700031610d757bd41a1c1fa2ac53d778fe0cad6a7b36f0722064cd1a801487eb47c26fa9d048973f84b6fee817e97970e1aa5bdb8f80adde2f9f025614c77aea2678a2f291cf61454faa7edae2213a53b7e99a440052a5df6acafb1e010145e7b230c70ec92354c13a8b1dc2a2b6a6062c8027de7d6", 0x87}], 0x1, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, 0x0, r3}, @cred={0x20, 0x1, 0x2, 0x0, r4, r5}, @cred={0x20}], 0x60, 0x4000000}, 0x4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="db04", 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$TCXONC(r2, 0x540a, 0xffff) 03:33:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x7) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r5, &(0x7f0000000300)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00', 0x3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc6ffd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1054bf3f4db2cec07400000000000000000000"], 0x0, 0x0, &(0x7f0000000100)}) 03:33:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000200)={0xc24, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x160, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x7, 0x2}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x3, 0x100000001, 0xfffffffffffffff9, 0xfffffffffffff745}, {0x42, 0x8, 0x5, 0xfff0}, {0x6, 0x6, 0x9, 0x6}, {0x4, 0x0, 0x2, 0x8}, {0x5ad9, 0xa9, 0x7, 0x3ff}, {0xf36, 0x9, 0x3, 0x6}, {0x5, 0x0, 0x8, 0x4}, {0x8, 0x7, 0x2000000, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xcb56}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x1a8, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xc4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r1}, {0xb0, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x2e60, 0x4, 0x2, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r1}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x44}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r1}, {0x178, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xcc6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x144, 0x2, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xff, 0x9, 0x8000, 0x7}, {0x6, 0x52, 0x100, 0x71}, {0xffff, 0x6, 0x800, 0x6}, {0x7fff, 0x6910, 0x80, 0xff}, {0xa1ba, 0x17, 0x4e7, 0x80}, {0x8, 0x3f, 0x8, 0x8001}, {0xfffffffffffffffd, 0xfb2c, 0x2, 0x1}, {0x0, 0x100, 0x7, 0x4}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x99dd}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r1}, {0x264, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x4051}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0xfffffffc}, [@NDA_DST_MAC={0xc, 0x1, @link_local}]}, 0x2f2}}, 0x0) 03:33:34 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x3) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x2e}, &(0x7f0000000280)="799940e97981f36d5fbd03a230af3d736a477f946c67af8352d71d77cd68e308c64de5dc302052fa0789dcc1b4de90825cfa0be2ddce9343dbc8ff4ceefc5858c7e80705d5cd93f2fa5b98408476c13f2368cdffcd3374d67e4f215d6a8f41f2ca98a7b0f5f0bf9eed1f95833437215ff9466ab136a090421d97832f52d4b7d63d7aaa21cf927610a977c0a1ae28f3e4411c008c97abf6e2bb624b26fe715ee855bd0c3c9088aea48cb55579395fa61246c6bcaee78e9a2f983c61b39400", 0xbe, 0xfffffffffffffffb) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x60480, 0x0) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x2, 0x15, 0x7f, 0x0, 0x31, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_key={0x18, 0x9, 0x5a8, 0x0, "73f2facfc6df69973495c584df36d500fe7a2748ab6d323cd84f5677e7b50defc1daf2c2b4d669a5b224a79395b471fd19b76007190c1a2f6fd83aaba0b33031115ca6c68b01da3bb66f4302f9385f8ad9b7b8f44f11df84fdead3c6171a03167b9398d94aae11311c02b373234128176e68a108ad23d1f4be72c821dada0e9ae2c8a214363cfc1bc7ce87bcfb2b9aba4c06068a5f5211b0dea54b55ebcbce47cab60f710c7664dab5608acddece601179907a84a0"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x6, @local, 0x100000000}}, @sadb_key={0x4, 0x9, 0xb8, 0x0, "23c0b3e3e1d3514682956652bab398660b4ab3e3902980"}, @sadb_lifetime={0x4, 0x4, 0x2, 0x0, 0x4, 0x3}, @sadb_lifetime={0x4, 0x3, 0x7, 0x7, 0x2, 0x9015020}, @sadb_lifetime={0x4, 0x2, 0x8, 0x1ff, 0xfffffffffffffffc, 0xfffffffffffffffb}]}, 0x188}}, 0x20000000) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000100)="ba8a6ecb463321fc9d235a25047167c884b6e4e8292a1ba2b7da041a682cc9078958b8ddcf40c5d7ba963cbffd0a6ddbb4026ad8b23e5011e686a17edf37965526cd78488cda2649cf9a963002b95b509beb3b5f9279b7a0b0074cc77ac5b13513c850ef8146b8f4099db36a371201c4564b1d65d2817269125b0076a1da4e3c12176242a46b2c4cd9caa5154e9c827d59f046ec2482b716fd96a0a256d475a1ed3d337a74558d56175d8f2d3e6f4e0db436dbb2450201fb088f21064b23262532bb", 0xc2) [ 428.392606] binder: 26060:26063 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:34 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x6, 0xfffffffffffffffc) read(r0, &(0x7f0000000040)=""/117, 0x75) 03:33:34 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) fstatfs(r0, &(0x7f0000000140)=""/108) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x1) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x5, 0x4) 03:33:34 executing program 1: perf_event_open(&(0x7f0000001580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000001c0)={0x0, 0xffff}) syz_genetlink_get_family_id$fou(&(0x7f0000001640)='fou\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) sendto$inet(r0, &(0x7f0000001680)="194279c95790e5e7b59fb833775604e54ff4d1f47a812b609006862e26723d2c5c1e8b8d2976945df632ae813ebfc1559e001484d21c6696f81b271d682e22c9be1157d1603c75cdd0b8e3ad3f4c8eb67cb371356f969ebb6ef23d2a787a35f53dc83b8e68d7882b7028376165db949f87f1506f7f3f66ee9defb0796d7bd011f1a4477c1aa03a86bcea4eb17a012b8ce7b83ff402d284528e19ea78b90fa6", 0x9f, 0x10, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380), &(0x7f00000003c0)='/dev/full\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'xcbc(serpent)\x00'}}) mprotect(&(0x7f000070a000/0x3000)=nil, 0x3000, 0x0) request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='/dev/sequencer\x00', 0xfffffffffffffffe) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) tkill(r2, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) write(r1, &(0x7f0000000140)="3b8736d38c7c2c51ec576085f398d646c87890cd11925c3f5cc284f1bdc9c34063485a3980fbd65f5100000000000000", 0x30) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) [ 428.442399] Option 'hÍÿÍ3tÖ~O!]jAòʘ§°õð¿ží•ƒ47!_ùFj±6 B—ƒ/RÔ·Ö' to dns_resolver key: bad/missing value [ 428.446045] binder: 26060:26063 unknown command 0 03:33:34 executing program 5: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_rx_ntuple={0x35, {0x1b, @hdata="795d1c8fc2e333e4af1afc1ccd42ae56351d43107d26f2934362b57c2bf9b2bec511d387a755843526c54167bc45dd4f1f64fe391a965c859ca7015a88fd8987123001121e5221be", @esp_ip4_spec={@multicast2, @loopback, 0x4, 0x100000001}, 0xd5, 0x3, 0x0, 0xc9, 0xffffffffffffffff}}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x202, 0xdd) accept4$packet(r1, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001200)=0x14, 0x800) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001240)={@dev={0xfe, 0x80, [], 0x14}, @mcast1, @ipv4={[], [], @multicast1}, 0x4, 0x7, 0x6, 0x100, 0x3f, 0x20000, r2}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000012c0)) read(r1, &(0x7f00000001c0)=""/4096, 0x1000) 03:33:34 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x48, 0xfffffffffffff8a0, 0x88e}, 0xc) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e20, @loopback}}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x800, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000000c0)) [ 428.446054] binder: 26060:26063 ioctl c0306201 20008fd0 returned -22 03:33:34 executing program 0: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="ee54f65006915c0934ba740d75d56dc73f7613142999e5d5824c3edb70de2a2b4c70d2b8ff00cc65a20b20f6e06acfc82a8d23a82cf60ffb308b0bc262e5d862f9345de3901fcc55e35a8a", 0x4b, 0xfffffffffffffffd) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f00000001c0)="025c3f0a00145f8f764070") ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x8, 0x0, 0xfffffffffffffff9}) gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5473, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc), 0x4) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) lseek(r2, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 03:33:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000002c0)="2e2f66692e65318c", 0x0, 0x0) r1 = fanotify_init(0x19, 0x0) fanotify_mark(r1, 0x11, 0x3ffffffe, r0, &(0x7f0000000040)="2e2f66692e65318c00") mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 428.534907] binder: 26060:26084 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 428.559438] Option 'hÍÿÍ3tÖ~O!]jAòʘ§°õð¿ží•ƒ47!_ùFj±6 B—ƒ/RÔ·Ö' to dns_resolver key: bad/missing value [ 428.559512] binder: 26060:26084 unknown command 1704546753 [ 428.559523] binder: 26060:26084 ioctl c0306201 20000040 returned -22 [ 428.559920] binder: 26060:26084 unknown command 1069503504 03:33:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x800000000000003, &(0x7f0000000000)="025c3f0a00145f0f764070d1f19af99ce9b4235704537e7abb857cb4eecd89258846bd8dafcec029abbf29663a01e0e393b40f60a63fa402d88355360698e942fb7c13460961193d0dab1eb547952eeee8addecf4234775a77ddabc59d3e2e2cc9f57248f626d0513cec9ae460a691a47c61211732ffc2255a26d5a83433bceea860bf134de0fd1c2c5119eedac756daf1b4a1e8dcb97a340ff3378b58b5331992d503925d61ef674f0bacf3e62c2594") r1 = socket(0x10, 0x3, 0x0) write$binfmt_elf64(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000"], 0x78) getsockname(r1, &(0x7f0000000100)=@alg, &(0x7f0000000180)=0x80) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000dc0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=ANY=[@ANYBLOB="280000001e000106000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000a7aae3678475cc69ccb0a62eff"], 0x28}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x280, 0xa0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) getegid() 03:33:34 executing program 0: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="ee54f65006915c0934ba740d75d56dc73f7613142999e5d5824c3edb70de2a2b4c70d2b8ff00cc65a20b20f6e06acfc82a8d23a82cf60ffb308b0bc262e5d862f9345de3901fcc55e35a8a", 0x4b, 0xfffffffffffffffd) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f00000001c0)="025c3f0a00145f8f764070") ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x8, 0x0, 0xfffffffffffffff9}) gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5473, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc), 0x4) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) lseek(r2, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 03:33:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mprotect(&(0x7f000004c000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x0) mprotect(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x0) [ 428.559928] binder: 26060:26084 ioctl c0306201 20000180 returned -22 [ 428.601764] FAT-fs (loop5): bogus number of reserved sectors [ 428.601769] FAT-fs (loop5): Can't find a valid FAT filesystem [ 428.641915] FAT-fs (loop5): bogus number of reserved sectors 03:33:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000100)={0x35, 0x3, 0x0, {0x5, 0x14, 0x0, 'securityem0bdevnodev'}}, 0x35) epoll_create1(0x80000) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x2e, &(0x7f0000000000)={@remote, @link_local, [{}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000080)) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/50, 0x32}, 0x0) 03:33:34 executing program 2: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)) mknod(&(0x7f0000000240)='./file0/file0\x00', 0x20, 0x4) r0 = fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe, @tid=r0}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x80000) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000cc0)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c6bacdf595bcaced0e2ed14772152e6125eb673003382b4cdcc6a59d3a1e6dcc9c51538b3661182e5485911f9f996e1d9bf03a8ff41fe4bd579a373cdab9148ceed599533b91087f0474149cf4b5f1c33527afb8ed47d99f034a9e6c07fea34723aaa83112cb5b6f87d8e856276001739bdca2071380cb3c9565d900ce26920ddfd56bfa34ed2172d1cdb0f71a320b3f48e1bc11ef3255d2dd208ffe5e102a2114ff"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) prctl$getreaper(0x0, &(0x7f0000000980)) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000a00)='./file0\x00', 0x4000000000000001) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x4000, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000580)='./file0/file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000840)={@in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0xd47, 0x1, 0x3, "dd782a68966b66816f0a38509b5743283c72d3de75a2a86a989d44bead6bb3bf3620eb7313b9cd9c56c77fe067f965830339a4c6723e55138f3393f4df1c2f6247b54609a6200b324afcd08f9414cd5a"}, 0xd8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) socket$inet6(0xa, 0x203000000000002, 0x0) [ 428.641920] FAT-fs (loop5): Can't find a valid FAT filesystem [ 428.710442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26121 comm=syz-executor1 [ 428.818388] Process accounting resumed [ 429.020858] Process accounting resumed [ 429.493955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26132 comm=syz-executor1 [ 429.592620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 429.601882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 432.970211] IPVS: Creating netns size=2536 id=46 [ 433.146575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 433.161674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 433.220655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 433.234787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 433.291187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 433.305631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 433.319778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.334495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.996651] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 434.032323] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 434.038491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.045206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x4848, 0x0) r4 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffb) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000380)={0x7, 0x6}) dup(r1) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000340)=""/24) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:40 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000800)={0x0, 0x0}) ptrace$poke(0x5, r0, &(0x7f0000000840), 0x11f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x100000000000000) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) lseek(r1, 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB=';'], 0x1) getsockname(r1, &(0x7f0000000500)=@nfc, &(0x7f0000000580)=0x80) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='9p\x00', 0x88, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0x1000}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x401}}, {@timeout={'timeout', 0x3d, 0xffffffffffffff7f}}]}}) futex(&(0x7f00000005c0)=0x2, 0x0, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x1, 0x2) getxattr(&(0x7f0000000680)='./bus\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB='o'], &(0x7f0000000740)=""/156, 0x9c) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000880)={0x9, 0x1, 0x4, 0x5}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) sendfile(r1, r3, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r2, 0x0) 03:33:40 executing program 2: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)) mknod(&(0x7f0000000240)='./file0/file0\x00', 0x20, 0x4) r0 = fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe, @tid=r0}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x80000) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000cc0)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c6bacdf595bcaced0e2ed14772152e6125eb673003382b4cdcc6a59d3a1e6dcc9c51538b3661182e5485911f9f996e1d9bf03a8ff41fe4bd579a373cdab9148ceed599533b91087f0474149cf4b5f1c33527afb8ed47d99f034a9e6c07fea34723aaa83112cb5b6f87d8e856276001739bdca2071380cb3c9565d900ce26920ddfd56bfa34ed2172d1cdb0f71a320b3f48e1bc11ef3255d2dd208ffe5e102a2114ff"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) prctl$getreaper(0x0, &(0x7f0000000980)) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000a00)='./file0\x00', 0x4000000000000001) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x4000, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000580)='./file0/file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000840)={@in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0xd47, 0x1, 0x3, "dd782a68966b66816f0a38509b5743283c72d3de75a2a86a989d44bead6bb3bf3620eb7313b9cd9c56c77fe067f965830339a4c6723e55138f3393f4df1c2f6247b54609a6200b324afcd08f9414cd5a"}, 0xd8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) socket$inet6(0xa, 0x203000000000002, 0x0) 03:33:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x100000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="141276231b1fb71bf700f33ec95f17d82c9f989e4ff3c9a1341472ef42e2499fdbf4cd450b6f3ba0870cb707dca5cd5cb7ab77f371331691b42b22b661ac9ed01312d4915247"]], 0x0, 0x0, &(0x7f00000003c0)}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 03:33:40 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000440)='/dev/loop#\x00', 0x0, 0x8000) r1 = dup2(r0, r0) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, r2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x36bc, 0x3}}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) ioctl$fiemap(r4, 0x40086602, &(0x7f0000000140)=ANY=[]) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000140)=0x4) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000005c0)={{0xfffffffffffffffe, 0x3, 0x3794, 0x4, 0x3}}) sendfile(r3, r3, &(0x7f00000000c0), 0x80) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffffffffffffffe1) fcntl$setstatus(r4, 0x4, 0x4000) write$selinux_access(r5, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000640)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x800}) setns(r4, 0xfffffffffffffffd) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) sendmsg$nl_generic(r7, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0xd4, 0x24, 0x20, 0x70bd26, 0x25dfdbff, {0x20}, [@generic="db7bce3bb31b94d7471a465e8ab12bb3f83b533b648a52f5e98417ef77058d57391e5a2de263e79edcfe5a48c6088e4b60213202c46fe1faaed4ec3ebe4edd10bb78f9f43367c3e2cda84ee49d3adc46765020b16c2d6c168f7eba6cf25d45085b720b9f09745dd5af396eac30b0cf6728c54003db554fcff12c24180af8d9487216110f6138fc92d0eec31725be7c0133bf69cb60a52266fcfe6db8a8f71610c564e7", @typed={0x1c, 0x86, @str='GPLposix_acl_accessself\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc010}, 0x48010) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000034b86908de005083cc6d48e345dee7aad39ced304bbf22a09c23c42ebb649faf0dd9ca00bdeda7cf3cd6d78acb1a4ad252d5090ce9c5a3836f8ffa4b114022e0605236620c5180743e1f076560e2a0165005150a3b6c4fe2452e558efadca311baa1eb3a49dd656bd09868228955f585476dfb8b9514d8fed96ab207fb3def99679ca8effae41bc6e14cf16f2e73"], 0x92) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0xfff, 0x1, &(0x7f00000016c0)=[{&(0x7f00000015c0)="cdf7b6e70bfdf1c351f656fbfcda35f9cbcdff9191217ac2823c41e1425a731f1fa718bac0e58c4ef62b2127d4f3fcc325d72b7340dd16480dd5082190cb453be2be81c9bd4ebdfbd7809fbe2a8ff4cbbd691014cb7a390d6e3dd98bcb31c1da62e2f9373accc18161202bdfb9cae0c49a8e7494919e73a129281c822e881d0c931ccfa635cf7606a89cdd51c4777a562002636c279fc90cf9d27a706e3ffb969c972d404a69c73f71528cb21558250c709d15763e8b9bf6f06b4f6eca13a3bc69f5b29b1d1036dc7ecb9091459a55c10f9ad0d634b729bd9bcf5ea0f862a4e7a81a6348a9b0e8097b85a2", 0xeb}], 0x200000, &(0x7f0000001780)=ANY=[]) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001800)) gettid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)) getpid() ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000001880)) ptrace$peekuser(0x3, r6, 0xa) 03:33:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000013c0)={'team_slave_0\x00', {0x2, 0x4e24, @remote}}) mount(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file1\x00', &(0x7f0000000100)='tmpfs\x00', 0xc8d, &(0x7f0000000080)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r2, 0x1, 0x0, 0x10000101) times(&(0x7f0000000140)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000e701000000f8ff00000020000c00000000000000"]) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e24, 0x2, @loopback, 0x8}}, {{0xa, 0x4e20, 0xeb9, @local}}}, 0x108) rt_sigprocmask(0x2, &(0x7f0000001340)={0x80000001}, &(0x7f0000001380), 0x8) readlinkat(r2, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)=""/176, 0xb0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/4096) 03:33:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x20000002}) 03:33:40 executing program 7: openat$uinput(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/uinput\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) fstat(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)="9c4feffab32d859b7b16acf3ac14195f375700031610d757bd41a1c1fa2ac53d778fe0cad6a7b36f0722064cd1a801487eb47c26fa9d048973f84b6fee817e97970e1aa5bdb8f80adde2f9f025614c77aea2678a2f291cf61454faa7edae2213a53b7e99a440052a5df6acafb1e010145e7b230c70ec92354c13a8b1dc2a2b6a6062c8027de7d6", 0x87}], 0x1, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, 0x0, r3}, @cred={0x20, 0x1, 0x2, 0x0, r4, r5}, @cred={0x20}], 0x60, 0x4000000}, 0x4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="db04", 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$TCXONC(r2, 0x540a, 0xffff) 03:33:40 executing program 4: r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) mmap(&(0x7f0000005000/0x6000)=nil, 0x6000, 0x0, 0x11, r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x2c9, 0x3, 0x80000000, 0x56e9, 0x0, 0x1, 0x200, 0x0, 0x2, 0x0, 0x5, 0x28a9, 0x2, 0x3ff, 0x1, 0x1, 0x1, 0x2, 0x4, 0x9, 0x1, 0x2, 0x101, 0xac, 0x3, 0x4, 0x2, 0x44b, 0x100000000, 0x5, 0xbd2, 0x7, 0x9, 0x9, 0x7, 0x6, 0x0, 0x8, 0x1, @perf_config_ext={0xbdb, 0x80000000}, 0x1200, 0x16, 0x800, 0x1, 0x7, 0x8, 0x6}, r1, 0x10, r0, 0x2) clock_nanosleep(0x0, 0x40, &(0x7f0000000000), &(0x7f0000000040)) [ 434.444297] binder: 26535:26546 unknown command 536870976 [ 434.472899] 9pnet: Could not find request transport: rdma 03:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x101080) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000380)) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) pipe2(&(0x7f0000000300), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:40 executing program 4: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000380)="2f005b37dfa5b433c070c3f613bcbc395ccb42723153977e90e32731299dee0c4a3db1740f27ae61cac1bd8388d6f229bd48d1d5d9be79db4ee9002d40f841195854f2f2ac3b4c4a0d70e3626bbbaf99f3a8638c3ff99487a0b5fe7c8aa3e24061957627d2075f8cee184c3f3adbfb9567e950ce46881c16e2a7ade170a364bc000000000200000000", &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x4, 0x0, 0x1000f4) r2 = open(&(0x7f0000000140)='./bus\x00', 0x500, 0x1) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 434.535048] binder: 26535:26546 ioctl c0306201 20000440 returned -22 [ 434.564479] binder: BINDER_SET_CONTEXT_MGR already set [ 434.573801] binder: 26535:26555 ioctl 40046207 0 returned -16 [ 434.591835] FAT-fs (loop6): invalid media value (0x21) [ 434.591841] FAT-fs (loop6): Can't find a valid FAT filesystem [ 434.610425] binder: 26535:26546 unknown command 536870976 [ 434.610434] binder: 26535:26546 ioctl c0306201 20000440 returned -22 03:33:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000001c0)=0x5, 0x4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) open$dir(&(0x7f0000000180)='./file0\x00', 0x80000, 0x100) 03:33:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") fchdir(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x410240, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x5, 0x12) ioctl$TIOCSTI(r1, 0x5412, 0x8001) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0805000000000000c2040000007f000100070366bbe1050200740718000000040000010000000000000000000000"], 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086607, &(0x7f0000000040)={0x10007ff14}) 03:33:40 executing program 2: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x1fb}, 0x7) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x7530}, {0x77359400}}, &(0x7f0000000100)) r2 = socket$packet(0x11, 0x2, 0x300) recvmsg(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x6, &(0x7f00000001c0)=""/3, 0x3, 0x7f}, 0x20) write$P9_RREADDIR(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="5b000000290100000000000000000000000100000000000000000000000000000d002e2f66696c65302f66696c653000000000000000000000000000"], 0x3c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:33:40 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000800)={0x0, 0x0}) ptrace$poke(0x5, r0, &(0x7f0000000840), 0x11f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x100000000000000) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) lseek(r1, 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB=';'], 0x1) getsockname(r1, &(0x7f0000000500)=@nfc, &(0x7f0000000580)=0x80) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='9p\x00', 0x88, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0x1000}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x401}}, {@timeout={'timeout', 0x3d, 0xffffffffffffff7f}}]}}) futex(&(0x7f00000005c0)=0x2, 0x0, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x1, 0x2) getxattr(&(0x7f0000000680)='./bus\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB='o'], &(0x7f0000000740)=""/156, 0x9c) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000880)={0x9, 0x1, 0x4, 0x5}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) sendfile(r1, r3, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r2, 0x0) [ 434.624509] 9pnet_virtio: no channels available for device / 03:33:40 executing program 1: syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x408482, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002bbd7000fedbdf25090000000800040000000080080006000000004c00020008000800e8ffffff14000100ac14140b00000000000000003142e0ce3c9b3e2b0000000008000600e10a000008000b000a000000080004001d2e000014000100ac1414aa0000000000000000000000006943b7c25efbaa1b4da44e21318bb323069b0e722ea7146deab8c6e088d223d8839736ff00a50bfb89dace6b294693bd9197c31adb04b5134c0b4315f0f662df89bf46ca469b51b2d2c9894dc2a7f81d20aecff86bf6d01629017d1403991f0a"], 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 03:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x408200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000056a663a9c9559f9bb5d29f73eab344ddc7e96ec658784d69f9c9caff1f579905749fc9cf7bb8d9"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x6, 0x807, 0x44c0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0xffffffffffffff3b, 0x0, &(0x7f0000000340)="3b221805c235d7bf7fab3b49c3568012ee732b62"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000003fabed4b12fd5402d83761dba5fdcbe116d4160a5d703895bd55fbc94fd1ec325527edb149e08df9f7b80f40e5160d07cf71b255b43cf91be9dee3ee6be29b9c6f08a9dbc6cd178018f4d2c18e54b5e32fea7dbc2135e3ffedc93983293a9681f858109402f4da1bcb2c48c16de5dc1c53b354b9e73b30a5a80e1ae85bf4d1fe39329298e385c4e6a6eaf2064bd9cf616b38ddf7aa0b00b90db19c1c55600e343c0c32393ce85ceb55e800a99ee7bef909526c4dbdc7bd"], 0x0, 0x0, &(0x7f0000000100)}) [ 434.645242] 9pnet: Could not find request transport: rdma [ 434.656918] Process accounting resumed [ 434.667175] 9pnet_virtio: no channels available for device / [ 434.694127] binder: 26568:26583 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 434.772219] EXT4-fs warning (device sda1): ext4_group_extend:1759: can't read last block, resize aborted 03:33:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x1) ioctl$SG_IO(r0, 0x2284, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, @buffer={0xfdfdffff, 0x46, &(0x7f0000000040)=""/70}, &(0x7f0000000080), &(0x7f0000000380)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) fcntl$getflags(r0, 0x40b) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = memfd_create(&(0x7f0000000140)='-wlan1-\x00', 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = pkey_alloc(0x0, 0x1) pkey_free(r4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='bpq0\x00', 0xe2) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x5, 0x7ffffffd, 0x400}, 0xc) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000280)={0x1000, 0x5}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x0, 0x0, 0xa0, 0xa0, 0x3a, 0x0, r1}, {0x9d2, 0x7, 0x0, 0x4, 0x3f, 0x7fffffff, 0x0, 0x3}, {0xffffffff}}, {{@in6=@mcast2, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x3502, 0x0, 0x0, 0x0, 0x0, 0xffff}}, 0xe8) [ 434.859658] binder: 26596:26601 Acquire 1 refcount change on invalid ref 0 ret -22 [ 434.863427] EXT4-fs warning (device sda1): ext4_group_extend:1759: can't read last block, resize aborted [ 434.878187] 9pnet: Could not find request transport: rdma [ 434.904687] binder: 26596:26601 unknown command 0 03:33:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000080)="278e25784a2b1693b30611e43c64dbe6729c9ac4421cb829d44ad866379ffcc7a218e24eb478b585c392cda064e585e1db201ee6e0b6a35007bb7afa06f9bd220dce08eaa11f69597b58556e2265267ce0b723c76cf03b05838ffddc9fc22a8cb12ad07b3a5a440243f176eb654da228e66239f2d718c2710becc1fa14818f4d6dfb12066e3e49f6c4b420f54a2af29984072c11a7b25f8406a1f6af320c1a6674ae7d647dd105330e07935c4d4b5deaff21abce31df280d3656dbc76f955a02a4b7c0c2933df5f33e944cd44c5c4a922675de4cc234e519fd6275341d0c02fd361827d0bd7a9b9b5d2d59bd62aca1a19923b02f") ptrace$setopts(0x420b, r2, 0x8, 0xa07000) 03:33:40 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x8000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000440)={0x4, {{0x2, 0x4e20, @rand_addr=0x3}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="9f00ad3822d6e450ca12ba9b62bfe94603b4e96342", 0x15}], 0x1, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000140)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xff01) ioctl(r1, 0x5, &(0x7f0000000200)="b2ccbf4dd784c9d0e7fee758451c82ce2d1edc29959bd39936093cfd4b49ea98406e0a55269ae5dace959d0f57e358fe25d0ebbd5761ae5abd4ed80487b8855fc928cd92f7cab812f06a0e79efb365965af42b1e74971f9c6ef22f54ed5df3cd45bf35535f89bafcec8da8f1f8e5bfa0429f29de1b028648faa6b5bf25e8988b1105fddb0781ab39d00820aa8197e8a606c0a632ee2aa5443a5339b6ffb1323ece16e5992eab") fcntl$setstatus(r1, 0x4, 0x4000) write$selinux_access(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656d5f753a6d626a6563745f723a6574625f4f4885604c6ff00f81b3f9743a7330202f7573722f7362696e2f6e747064203030303030303030303053c49affed061a4f7881a9c1fecbaac6f1c1d071b685de4bec266b65ab44d631972dee5b9b"], 0xfffffeff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) inotify_rm_watch(r1, 0x0) ptrace$peekuser(0x3, r2, 0x6) [ 434.931141] binder: 26596:26601 ioctl c0306201 20008fd0 returned -22 [ 435.042198] binder: 26596:26610 unknown command 0 [ 435.047571] binder: 26596:26610 ioctl c0306201 20000180 returned -22 03:33:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 03:33:41 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x8, 0x401, 0x8, 0x2, 0x2a, 0xc1a, 0x400}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000180)) 03:33:41 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x1000, 0x0, 0x1ff, 0x1f, 0xfcf0, 0xfff, 0x0, 0x9, 0x40}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40, 0x0) bind(r1, &(0x7f00000027c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x1}) r2 = dup3(r0, r0, 0x80000) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000002c0)=""/4096, 0x1000) recvmsg(r3, &(0x7f0000002780)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f00000025c0)=[{&(0x7f00000012c0)=""/177, 0xb1}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000002380)=""/2, 0x2}, {&(0x7f00000023c0)=""/26, 0x1a}, {&(0x7f0000002400)=""/9, 0x9}, {&(0x7f0000002440)=""/66, 0x42}, {&(0x7f00000024c0)=""/202, 0xca}], 0x9, &(0x7f0000002680)=""/196, 0xc4, 0x4}, 0x2) 03:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x6, 0xfa8, 0x0, 0x2, 0x0, 0x6613, 0x3, 0x800, 0x7fff, 0x100000001, 0x2, 0x5bba234}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x9b4b62b}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 03:33:41 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) r5 = getpid() ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000040)={&(0x7f0000000140)=""/89, 0x59}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x405c, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xfffffffffffffffe}, {0x6, 0x3, 0x80}]}, 0x10) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000280)=0x80, 0x4) sendmmsg(r1, &(0x7f0000000180), 0x40000000000034f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@local, @in=@multicast1, 0x4e22, 0x2, 0x4e24, 0xfffffffffffffffe, 0x2, 0xa0, 0x20, 0x3f, r4, r5}, {0x7fff, 0x800, 0x101, 0xa58, 0x6, 0x1, 0x7, 0x20}, {0x100, 0x7fffffff, 0x8bda, 0x6}, 0x8, 0x6e6bb4, 0x0, 0x1, 0x0, 0x2}, {{@in6, 0x4d4, 0x2b}, 0xa, @in6=@local, 0x3504, 0x6, 0x3, 0x40, 0x3, 0x4, 0x4}}, 0xe8) 03:33:41 executing program 0: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x40, {0x2, 0x0, 0x1}, 0x80, r2, r3, 0x1, 0x7, 0x3, 0x4, 0xfdd1, 0xe9, 0x4b, 0x101, 0xd1a4, 0x9, 0x1172, 0x2, 0x9, 0x5, 0x8000}}, 0xa0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) fcntl$setstatus(r1, 0x4, 0x6000) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 03:33:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000140)={{}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}}) 03:33:41 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r9 = socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'veth1_to_bond\x00'}, 0x18) 03:33:41 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000000c0)=0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000000800)}) 03:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x6, 0xfa8, 0x0, 0x2, 0x0, 0x6613, 0x3, 0x800, 0x7fff, 0x100000001, 0x2, 0x5bba234}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x9b4b62b}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 03:33:41 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x10000, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = socket(0x2, 0x803, 0x3f) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bridge\x00', 0x10) connect$inet(r2, &(0x7f0000390000)={0x2, 0x0, @loopback}, 0x10) ioctl(r0, 0xffffffffffffffff, &(0x7f00000000c0)="4be9b91501571900916d5a88ed280cbf543ee4022d5cfd2d7252210de26363") r3 = open(&(0x7f0000000000)='./file0\x00', 0x141046, 0x0) ftruncate(r3, 0x10004) sendfile(r2, r3, 0x0, 0x72439a6b) [ 435.568199] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 [ 435.671934] binder: 26596:26682 Acquire 1 refcount change on invalid ref 0 ret -22 [ 435.706671] binder: 26596:26682 unknown command 0 [ 435.713884] binder: 26596:26682 ioctl c0306201 20008fd0 returned -22 03:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xffffffffffffff57, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05630440000000001e032fb5099f8cc01e1b41774fe578601308194e4826df7d968cae5d8ad691dcc096a754df94d82efe9abb30a1bbf245795e02fe99e0cdca3a10e31df2d0af018be4ef083c34e9f962218f4b79f8b477db625dca1e3c64f1f466c86c66fc688a19a1f3e641e72f2b2302865b5ce08d75dc9436566f8649"], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000200)='\f'}) ioctl$sock_ifreq(r2, 0x89bf, &(0x7f0000000400)={'ip6_vti0\x00', @ifru_addrs=@rc={0x1f, {0x7, 0x3, 0x0, 0xffffffff, 0x60db9e3a, 0x6}, 0x4}}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000300)=[{}], &(0x7f0000001040)=""/4096}, &(0x7f00000003c0)=0x78) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:41 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0xffffffffffffff0c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) fcntl$setstatus(r1, 0x4, 0x42000) sync_file_range(r0, 0x80000001, 0x0, 0x3) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 03:33:41 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f00000000c0)='smaps\x00') socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000002c0)="0a5cc80fe3fe85715070b912bcfcf319f40d2c5285ff56febe5168d11d69ed5758298edd34b94576c899d1d407267060a676a25b5d2cd08d7a34ab0dcb888164979944bc5a460a2fcea37fc3f5cec739212b00a9578327c1433f8cefd12834d3fe1e35470473e32aae8e7f0eb123aa2183878c46999675145a9a04bf5cedf681724f46879ff683c9866dc7f86c8bfbe7c7e6379e9159a4b216cb90976a266ad0f080cad40fa9e6cba2f5c8e5ba60e38a5c4d969a3e5df5b5b50376187e2725959d3a205498b1ef57037514a21f6e") creat(&(0x7f0000000000)='./file0\x00', 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x8402) 03:33:41 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) r5 = getpid() ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000040)={&(0x7f0000000140)=""/89, 0x59}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x6, 0xfa8, 0x0, 0x2, 0x0, 0x6613, 0x3, 0x800, 0x7fff, 0x100000001, 0x2, 0x5bba234}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x9b4b62b}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 03:33:41 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='mountinfo\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001d00)=0x14) recvfrom$packet(r1, &(0x7f0000001c80)=""/101, 0x65, 0x10000, &(0x7f0000001d40)={0x11, 0xff, r2, 0x1, 0xffff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xffffffda, 0x2}, 0x10) 03:33:41 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000240)=""/62) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000001c0)={0x6c, @local, 0x4e21, 0x0, 'lblcr\x00', 0x0, 0x101, 0x18}, 0x2c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000200)=""/62) r4 = socket$inet6(0xa, 0xfffffffffffffffe, 0x0) sendfile(r4, r1, 0x0, 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cc47000fedbdf250900000044000300080007004e20000014000600fe80000000000000000000000000001d080007004e23000014000600fe8000000000000000000000000000aa08000500ac14141c0c00020008000b0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) socket$inet6(0xa, 0x6, 0xf2f8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)) getgid() sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) [ 435.774020] binder: 26596:26610 unknown command 0 [ 435.780087] binder: 26596:26610 ioctl c0306201 20000180 returned -22 03:33:41 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) r5 = getpid() ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000040)={&(0x7f0000000140)=""/89, 0x59}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:41 executing program 1: open(&(0x7f0000000280)='./file0\x00', 0x141045, 0x0) 03:33:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) fanotify_init(0x4, 0x7ffd) shutdown(r0, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_void(r2, 0x29, 0x0, 0x70fe0000000000, 0xf000) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x4) 03:33:41 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r9 = socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'veth1_to_bond\x00'}, 0x18) [ 435.831221] binder: 26699:26706 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 435.848503] binder: 26699:26706 unknown command 0 [ 435.859818] binder: 26699:26706 ioctl c0306201 2000dfd0 returned -22 03:33:41 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x400000000000018, &(0x7f0000dcffe8)=""/24, &(0x7f00000000c0)=0x3af) 03:33:41 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) r5 = getpid() ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000040)={&(0x7f0000000140)=""/89, 0x59}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0xffffffffffffffe1, 0x20, 0xfffffffffffffffd}, 0x10) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000ac0)=""/205) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'syzkaller0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}) clock_nanosleep(0x4, 0x3, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000200)={0x401}, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0x1c9c380}, 0x8) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x8, 0x3, 0x400, 0x8000, 0x3c14, 0x55, 0xc25, 0x7, 0x0, 0x7, 0xe3c4, 0x6}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x9, 0x3ff, 0x7f, 0x0, 0x0, 0x0, 0xa9b, 0x794}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x0) r4 = dup2(r3, r2) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x1, "780c96d1fb2d1143e68389a5fd22361022bb523fed29b2c6e6d2d9dc3c9018cac5b5b8a836c0cb60e107ea9a388a1fb300000000000000000000008000", "307a29715cb449dcdf535f2734501b5bf84b0000002c000000003945c748d62a", [0x2, 0x8]}) write(r0, &(0x7f0000c34fff), 0xd9dbd89c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x8) 03:33:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000180)="000000000000000000000010d0d006ceaa27f045270a1f28c601c5133c1935689308c876807b952f3d9202852dbbbb85e46f2c2be1537b04412e67b0c1712521ce8f85eb8fc2f0474a34fc947cde22efd705b0931617c0bbd0a57229321e61ae588ec465ea4a55fc9f2c0c9d41f180910291ae630c353ff0cf02e18278be2c6b7fc52039602c80add6cdbb8375") syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="5244534ba7011c0000000000009c9ba2090000080074b8b5ca71a6802583", 0x1e, 0x200}]) [ 435.921093] binder: 26699:26706 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) r4 = dup(r1) sysfs$3(0x3) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000300)={0x11, @multicast1, 0x4e22, 0x4, 'nq\x00', 0xc, 0x1f, 0x76}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:41 executing program 5: fanotify_init(0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) poll(&(0x7f0000000000), 0x200000000000001b, 0x11000006d) [ 436.010449] binder: 26738:26742 Acquire 1 refcount change on invalid ref 0 ret -22 [ 436.037194] binder: 26738:26742 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 436.109065] binder: 26738:26754 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 436.116496] binder: 26738:26754 unknown command 1704546753 [ 436.122363] binder: 26738:26754 ioctl c0306201 20000040 returned -22 [ 436.131266] binder: 26738:26754 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) 03:33:42 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) r5 = getpid() ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000040)={&(0x7f0000000140)=""/89, 0x59}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:42 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() socket$l2tp(0x18, 0x1, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7, 0x0, 0x40000000000b151, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) creat(&(0x7f00000000c0)='./file0\x00', 0x140) fdatasync(0xffffffffffffffff) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) accept4(0xffffffffffffffff, &(0x7f0000000440)=@ax25, &(0x7f0000000180)=0x80, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={@dev, @local}, &(0x7f0000000740)=0xc) 03:33:42 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x10000) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) ioctl$VT_WAITACTIVE(r0, 0x5607) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x3f, @rand_addr=0x6e2c, 0x4e23, 0x0, 'sed\x00', 0x8, 0x80000001, 0x6a}, {@multicast2, 0x4e20, 0x2000, 0x9, 0x3f, 0x1}}, 0x44) uname(&(0x7f0000000140)=""/222) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}, {{0x2, 0x4e20, @remote}}}, 0x108) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/222, &(0x7f0000000480)=0xde) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @local}, 0x10) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffffffffeffff, 0x4) flistxattr(r0, &(0x7f0000000500)=""/147, 0x93) ioctl$KDSKBLED(r0, 0x4b65, 0x80000000) ioctl$TIOCSBRK(r0, 0x5427) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000005c0)) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, 0x65, "af35709b26a871b1c47b2c9269aaa46ea835f785472e71b71cf50cb8078408d7b73093ea53162200d08739294c52683ff6408e6e060403214893902d9e0dd1c584e7bcf51bb026adf21cee7baa7aafad038eaf778b85dcac1af71daf22335a445b4d70e6a4"}, 0x6b) ioctl$KDSKBLED(r0, 0x4b65, 0x7fff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'yam0\x00', r1}) timerfd_gettime(r0, &(0x7f00000018c0)) write$P9_RSYMLINK(r0, &(0x7f0000001900)={0x14, 0x11, 0x1, {0x48, 0x3, 0x2}}, 0x14) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000001940)=0x7) ioctl$TIOCNOTTY(r0, 0x5422) r2 = dup(r0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001980)='/dev/hwrng\x00', 0x40400, 0x0) pwritev(r3, &(0x7f0000001b40)=[{&(0x7f00000019c0)="978e18adc8dc5e0691521462d5dbd94b4704bbf013b3ec47ecfcd4f2d94ed7a86df0299471536582e3d236c8455e0db35fde92efb0d6ee61166a396f4f4198c4759e79f029aa23da5454902c6a82c9ef8c74d4d019d1f35a633ba6d0735c00304ec57ddbc2ab2c253b367dfb4c956ee798a6ccb9d3300624517b90c56b", 0x7d}, {&(0x7f0000001a40)="21d3304aba877e67c5ed086bc560e1f3b5450e378fca90011531bb90987eac98486ed622eee316475ea92467a040f4ceb010137b7b9cfef94207bbae46c2f83fc17838686a9a73a73b4d2b1a3d66e6560aa3c62ffafbc83905f000d11354e3d8942810c15033aafcbdf61ab1adf13a9a1b54558c6eab4ed2f4e18a2e903b1964a169d536dca8e2e0f60d24bef87de3355da92af7c252368494fe179a42d38df8ce57ff0c40f9eb6b1cdbd650eb15da1f5fe2973d7bfdb04aa51052d83acc66a7a1448c7da0c1765ad61d0c85e996fd34b4b3f048f3a0d7adb1", 0xd9}], 0x2, 0x0) r4 = socket(0x1, 0x1, 0x3) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001b80)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000001bc0)="a34f5c5b292791f712deb55bb7ae4b625021565abfc7f2b6b2e612a44b0d1f28403d") ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000001c00)={0x8000, 0x6}) lseek(r2, 0x0, 0x3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 03:33:42 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) getpid() ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:42 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) lstat(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000140)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xff01) fcntl$setstatus(r1, 0x4, 0x4000) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0), 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') timer_delete(0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast2}, 0x80) 03:33:42 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) [ 436.348477] IPVS: Creating netns size=2536 id=47 03:33:42 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) [ 436.436055] IPVS: Creating netns size=2536 id=48 03:33:42 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:42 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r9 = socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'veth1_to_bond\x00'}, 0x18) 03:33:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x448, 0x0, 0x0, 0x130, 0x360, 0x360, 0x360, 0x4, &(0x7f0000000040), {[{{@arp={@multicast2, @multicast2, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, @mac=@random="dc1b1963c3d4", {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x9, 0x7, 0x7, 0x18, 0x1f, 0x1, 'syzkaller1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x18e}, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2ecc8c6f84469daba1998ab57bea6ef0939802d95f0ee3bed0614b10da92"}}, {{@arp={@dev={0xac, 0x14, 0x14, 0xb}, @multicast1, 0xff000000, 0x0, @mac=@local, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, 0x12a0, 0x400, 0xdd, 0x7, 0x6, 0x8, 'bcsf0\x00', 'ifb0\x00', {}, {0xff}, 0x0, 0x54}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0xfffffffffffffff7}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x2, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x498) 03:33:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="51faffffff0000000000"], 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) r3 = gettid() capset(&(0x7f0000000240)={0x20071026, r3}, &(0x7f0000000280)={0x8, 0x400, 0x20, 0x9c, 0x0, 0xc17}) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000200000000000000ffffffff0000000000000080000000000300000000000000090e0700000000000000000000000000000000000000000000000000000000000089c1d466d0ca0000000000000020000000000000000000008000000000000000800000000001041f46000000000000000000000000000000000000000000000000000000000000000000000000"]) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1) 03:33:42 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000100)=0xfffffffffffffffb, 0x4) r0 = socket$inet6(0xa, 0x5, 0x807) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000001c0)=[{0x20}, {0x6}]}, 0x10) getpeername(r2, &(0x7f00000000c0)=@ipx, &(0x7f0000000180)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000240), 0x4) sendmmsg(r1, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000006c0)}}, {{&(0x7f00000058c0)=@can, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x3d5, 0x0) recvmmsg(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000003000), 0x0, &(0x7f0000003040)=""/107, 0x6b}}], 0x1, 0x0, &(0x7f0000004ec0)={0x0, 0x989680}) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240), &(0x7f0000000280)='mslos\x00', 0xfffffffffffffffd) r4 = socket$inet(0x2, 0xb, 0x8) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000440)={0x9, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @local}, 0x108, 0x0, 0x8, 0x4, 0x8001, &(0x7f00000003c0)='bond_slave_1\x00', 0xffffffffffffffe4, 0xffffffffffffff72, 0x2}) utimensat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={{0x0, 0x7530}}, 0x100) 03:33:42 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004108}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x3e, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2842}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:42 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, ')-nodev*]vboxnet0system'}, {0x20, 'vboxnet1@'}, {0x20, '\'&'}, {0x20, '%procGPL'}], 0xa, "ba7d4dd588504d4feecfc61368e0d0917038098b69ed49adedbec82674a2fa557a6602dd5e362e719790d933519e65ab234389a50c84c930b2f297484049b923f1570ab62e586c2923554778ae2856d19211625bcdef3eebe6bfe4d7d4d270dcbcbc7046f36cea61b569b7c3657618420363719d36c12515f11372b3e9d1be80e8beb6f536087fcd587688b7bc40038a134d22323050355cf250a04c87fdbe2d67c192a1455ffa2de80c2403972cbbf7241f5e42c810af3e"}, 0xf1) r1 = epoll_create1(0x400) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x10801, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000000c0)="e95f6c775e92f1a1b0f8d55a427864d3044222fc725f32e8e46d24d7670e4707b84b43cd163924e56569bbda35033a1cf0208680db95dfc79ec6a39a16ffa01088ad68737a327fc85ad0d3a7afe93c6df661e871cc29334bc66a29476ea8a3e966db610d4bd41b50557a00466d0747c20d8de48598950ac6a51ac02662ade0c0f4c2b58f9fdc65") epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) 03:33:42 executing program 5: r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x33, 0x2, @tid=r1}, &(0x7f00000000c0)=0x0) timer_delete(r3) setresuid(r2, r2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xfffffffffffffecf) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000040)=@req) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000140)={0x2, 0x6, {0x0, 0x1, 0x9, {0x3, 0xfffffffffffffffa}, {0x8, 0x1}, @ramp={0x7, 0x6, {0xf26, 0x2, 0x2, 0x4}}}, {0x57, 0x10001, 0xfffffffffffff2ac, {0x9, 0x80000000}, {0x5, 0x9}, @cond=[{0x81, 0x1f, 0x3ff, 0xf0, 0x6c, 0xd49}, {0x9000000, 0x7, 0x5, 0x1, 0x6, 0x7}]}}) 03:33:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r5) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x14281804}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x54, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x10) ioctl(r4, 0x4000008912, &(0x7f0000000000)) sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) tee(r0, r1, 0x100, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) write$selinux_access(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="736a6563745f723a6574635f743a7330142f7573722f7262697e2f6e7470642030300900000000689c528b7417183e6d8c97e3c3433e000000303030302f303051a3"], 0x42) getpgrp(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001300000500000000e8eb3b0000000000000000"], 0x1}}, 0x20044800) 03:33:42 executing program 0: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000140)=""/148, 0x1a}], 0x18f, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/dev_mcast\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 03:33:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x1, 0x2, 0xba, 0x3f, 0x0, 0x3, 0x20, 0x1, 0x41c, 0x8, 0xfff, 0x7, 0x510a, 0x1, 0x100000001, 0x101, 0x8, 0x6, 0x800, 0x5, 0x7, 0x7, 0x6, 0x101, 0x31, 0xffffffff, 0x7, 0x3ff, 0x2, 0x0, 0x5, 0x10001, 0x8001, 0x3, 0x1, 0x3, 0x0, 0xf022, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x2, 0x0, 0x1, 0x400, 0x1d2, 0x7fffffff}, r5, 0x8, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:42 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r9 = socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'veth1_to_bond\x00'}, 0x18) 03:33:42 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0], 0xfed3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fadvise64(r0, 0x0, 0x7fffffff, 0x1) pwrite64(r0, &(0x7f0000000140)="269a4ae3d2f274f12c5e2f5efa470e287e4b15d23c4305964b4fdda00d1bc77cd748da52034ae95e47d134d150ad41dbad1bb9818ccc2a9e5a74c402f7ae039eb0eb1339f23212df9517744c63c4e42b7325ecacf9503f34b27ae084ccd8f191a2e6eba83d5dbc0e9220bb47fcc914f0d2e080b719408ff32022713da960ef5a5f6cb2611419fd4364f219424d2940906dda03c8727401b137a61947fe02a170dacf2f2762d60ec76db52c4da5c3c20bba295469f0643a7c4df0c60348bcd5561b396b55359bc5ae2bd650c219af4eee416d36252699f38ba73b03373d43a58d92d87547d9090ebb6db1", 0xea, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TCXONC(r1, 0x540a, 0xfffffffffffffffb) 03:33:42 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:42 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:42 executing program 0: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000540)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0xfffffe01) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x20400, 0x0) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/ipc\x00') mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) write$P9_RVERSION(r3, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) mq_unlink(&(0x7f00000000c0)='bdev\x00') r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x80000, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0xb) r6 = getpid() mq_notify(r4, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) preadv(r4, &(0x7f0000000700), 0x1000000000000067, 0x0) poll(&(0x7f00000001c0)=[{r4, 0x10}, {r3, 0x8}, {r7, 0x401}, {r7, 0x2}, {r7, 0x10}, {r2, 0x4}, {r3, 0xb293}, {r2, 0x2100}], 0x8, 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000900)=""/219, 0xdb}], 0x4, 0x4a) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) [ 436.971984] binder: 26833:26844 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x387, &(0x7f0000000600)=""/84, 0x27}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x8e}}], 0x4000000000002ce, 0x62, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="390c24e51979d94b4ee3f94001462775e97a15deb847a6d3083180bc0cf82d9225ebedf27d5d21d7b8a58a43c43d66890f0eb46612dcc5ddbdef7664df61a5d270ae629e945737f6e406b1fac146b08c559137d674f8ed6786a19a1307fd7dd9291c9d3b84626b58081d3700745547bbac7a9219635220178ad9af6d3952d3a79be926577de8958df6ecb60cf0eeb213a0ddc532c62de7b9ed8f5e08f147ec9ef1f21d52f1a1dad5323cf7f7538fd5d70b8df8675c84df6042e6a393fe31fd5d8ebfcf593001a67ffa53fc54ac97024a8a0e554f22c61ae0ba08f638cdabfbbf406fc70d0a1ce7145ea15ddc029c65bb509adc76", 0xf4, 0xfffffffffffffff9) ioctl$sock_ifreq(r0, 0x8919, &(0x7f00000001c0)={'team_slave_0\x00', @ifru_hwaddr=@random="d2d02deeb80f"}) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) keyctl$link(0x8, r2, r3) 03:33:43 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0], 0xfed3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fadvise64(r0, 0x0, 0x7fffffff, 0x1) pwrite64(r0, &(0x7f0000000140)="269a4ae3d2f274f12c5e2f5efa470e287e4b15d23c4305964b4fdda00d1bc77cd748da52034ae95e47d134d150ad41dbad1bb9818ccc2a9e5a74c402f7ae039eb0eb1339f23212df9517744c63c4e42b7325ecacf9503f34b27ae084ccd8f191a2e6eba83d5dbc0e9220bb47fcc914f0d2e080b719408ff32022713da960ef5a5f6cb2611419fd4364f219424d2940906dda03c8727401b137a61947fe02a170dacf2f2762d60ec76db52c4da5c3c20bba295469f0643a7c4df0c60348bcd5561b396b55359bc5ae2bd650c219af4eee416d36252699f38ba73b03373d43a58d92d87547d9090ebb6db1", 0xea, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TCXONC(r1, 0x540a, 0xfffffffffffffffb) 03:33:43 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) [ 437.021870] binder: 26833:26857 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) setns(r0, 0x24000000) sendfile(r1, r0, &(0x7f0000000180), 0x100000001) [ 437.116815] binder: 26833:26844 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 437.125057] binder: 26833:26844 unknown command 1704546753 [ 437.158862] binder: 26833:26844 ioctl c0306201 20000040 returned -22 [ 437.165744] binder: 26833:26869 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:43 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x6, 0x4) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x3, 0x400, &(0x7f0000002b80)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000480)=0xfffffffffffffed0) setresuid(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000700)="d99d5c70249624bf3303dda9982af907365549d91472b86a88a7e250b2a2dfea0eb5b672c52fe8633779090c94b8011097d3f4eaa5a59a7a39f8b11622c40000000072618e1d", 0x3) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f00000003c0)={0x2, 0xffffffffffffffab, 0x0, 0x0, 0x0, 0x80000001}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002b00), 0x2000005) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x4) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000002ec0), 0x9) process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000580)=""/222, 0xde}], 0x2, &(0x7f0000002a80)=[{&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000017c0)=""/238, 0xee}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/214, 0xd6}, {&(0x7f00000029c0)=""/84, 0x54}], 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000400)=ANY=[]}}], 0x1, 0x4040000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 03:33:43 executing program 7: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4080, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7d43) recvfrom$inet6(r0, &(0x7f0000000040)=""/89, 0x59, 0x2142, &(0x7f00000000c0)={0xa, 0x4e24, 0x3a985e76, @mcast1, 0x14b2}, 0x1c) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x6, 0x8000) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x5, 0x101, 0x2, 0xc821, 0x4, 0x401, 0xffffffff, 0x6, 0x3f, 0x8}) write$selinux_context(r0, &(0x7f0000000200)='system_u:object_r:setrans_exec_t:s0\x00', 0x24) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x101000, 0x0) renameat(r2, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000300)=""/192) r3 = openat$cgroup_ro(r2, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x577, &(0x7f0000000400)="c8999b5dcb1c816e5683d14f9b7ded8b2d2b945f8e7b0dc3ff1835c7d714c7206e6556f5e67bf5926904") epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000440)={0x10000000}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000014c0)={0x80000001, 0x8001, 0x1000, &(0x7f00000004c0)="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"}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001540)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, r5, 0x206, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x30}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x4001) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000001680)={'bridge0\x00'}) epoll_pwait(r2, &(0x7f00000016c0)=[{}, {}, {}, {}, {}], 0x5, 0xad35, &(0x7f0000001700)={0x80}, 0x8) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000001740)=""/207) syz_open_dev$usbmon(&(0x7f0000001840)='/dev/usbmon#\x00', 0x400, 0x2000) sendmmsg$unix(r2, &(0x7f0000002a80)=[{&(0x7f0000001880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001900)="2be41026f9868ee1d2091d38d429035b08564f1387281c0637e94b13ab941b85c438033bc9360cca132a40b1f4a5510c296789dba9f26cb9a00bef", 0x3b}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="1496321df45583aad2fea6da75cfb84fc8e465b544112ba471ec6d2a80", 0x1d}, {&(0x7f0000002980)="1a24d299dc2ef84c75decf448d57ada3aa0d8051cc9c2ca90c85f1511f5ea9fa8c45b41c165514cea2cb679fe4cf37281756b443f799994708f06b454c33ee5cf44e453589f4cfc2a1f93c978fc7da7f1cd882dd5ee88cc153f22432f9e3c534428b02b4bcd664cd0e0c2ab39bbfc428dfe3c2135e87254d1a39f564b80984576d1d3422f4590a6c352694ef2e1e0c1e5ddf0180ad6f843d19e6dd5559c7cf68c6396ccfc40dae305ca83070139412a6a33904051c5903779d", 0xb9}], 0x4, 0x0, 0x0, 0x4008000}], 0x1, 0x8000) r6 = openat$cgroup_ro(r2, &(0x7f0000002ac0)='memory.swap.current\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000002b00)) ioctl$TIOCSCTTY(r4, 0x540e, 0x40) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000002b40)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000002b80)=""/159, &(0x7f0000002c40)=0x9f) 03:33:43 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:43 executing program 2: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000300)=@ax25, &(0x7f0000000200)=0xff95) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r5 = gettid() ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r5, 0x1004000000016) 03:33:43 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) recvmmsg(r0, &(0x7f0000005e40)=[{{&(0x7f0000000ec0)=@ipx, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f40)=""/255, 0xff}], 0x1, &(0x7f00000048c0)=""/222, 0xde}}], 0x1, 0x0, &(0x7f0000005f00)) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x6) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000180)=""/11) 03:33:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xfffffffffffffffd}]}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a695", 0x5b, r4) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x0, 0x9f8, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r5, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) 03:33:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000380)=0x180000000c) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x36e, 0x0, &(0x7f0000000000)=[@enter_looper], 0xfffffffffffffd06, 0x0, &(0x7f0000000300)="f8e194b7be286863998409657697655bb73e4f936158bed452ac7bd5c9e929e3d6eafca87c598687937efca00bfe509a60116040a1bd94f1a922b2433ff92a4e4bf8d336d4376891877e21ea"}) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'io'}, {0x2f, 'rdma'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2f, 'memory'}, {0x2f, 'memory'}, {0x2b, 'io'}]}, 0x2a) 03:33:43 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) 03:33:43 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 03:33:43 executing program 7: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, r1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x18, 0x40c, 0x70bd29, 0x25dfdbfb, {0x1f}, [@typed={0xc, 0x88, @u64=0x1f28}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4080) [ 437.817744] binder: 26903:26907 Acquire 1 refcount change on invalid ref 0 ret -22 [ 437.833886] binder: 26903:26907 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:43 executing program 1: r0 = dup(0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0xf) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x80) sendto$inet(r4, &(0x7f0000000240)="2590e75c412f44bec8", 0x9, 0x4004040, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000340)={0x60002004}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r5, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r5, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000180)) sendto$inet(r5, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 03:33:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ustat(0x2, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20200, 0x0) fadvise64(r0, 0x0, 0xb57, 0x7) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x5) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @loopback}}}, 0x88) [ 437.919344] binder: 26903:26917 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 437.931049] binder: 26903:26917 unknown command 1704546753 [ 437.944991] binder: 26903:26917 ioctl c0306201 20000040 returned -22 03:33:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xfffffffffffffffd}]}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a695", 0x5b, r4) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x0, 0x9f8, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r5, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) 03:33:43 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) [ 437.973633] binder: 26903:26926 unknown command 0 03:33:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xf}}}, 0x24}}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x121002, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000200)={0x6, 0x7ff}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@mcast1, 0x27, r1}) 03:33:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x10}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) write$P9_RUNLINKAT(r0, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(r0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf32(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x81, 0x5, 0x100, 0x10000, 0x0, 0x3e, 0x8000, 0x290, 0x38, 0x37b, 0x7fffffff, 0x100000001, 0x20, 0x1, 0x1000, 0x101, 0x6}, [{0x4, 0x3ff, 0xe534, 0x3, 0x8, 0x9f4, 0x8, 0x4}], "78e2704725fc1697d82c9c79ef1a6cab22eb3c9e64686ffc38ffe821e3da3e9e2c1fe6cbd89198a6a4b00fbc3aded04f975a5f52745be1e4932a8baec869736ab256770dad2fd772b277f82ae9a1830156a009af8b33e097a1a1ecc9c859d264ac6c5a343a82aaf4f0ff776868adbff2d8084a44c7c82f1dffa0b9808a254873fde777c59177a3c8a189ac3cb9ac1b9385098fb0413fa44e39708458134be34f2bc251ce863c8b49e6fb4518cb8fa4e9f4e0cee997ea02", [[], [], [], []]}, 0x50f) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000001c0)=0x401, 0xfffffffffffffe3e) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x40) [ 437.973645] binder: 26903:26926 ioctl c0306201 20000180 returned -22 03:33:44 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x1, 0x400, "44a6"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 03:33:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xfffffffffffffffd}]}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a695", 0x5b, r4) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x0, 0x9f8, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r5, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) 03:33:44 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)) r0 = socket(0xa, 0x1, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r2 = dup2(r0, r1) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) pipe(&(0x7f0000000300)) fcntl$getown(r3, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x7) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') [ 438.081415] FAT-fs (loop0): bogus number of FAT structure [ 438.124220] FAT-fs (loop0): Can't find a valid FAT filesystem [ 438.260554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33025 sclass=netlink_route_socket pig=26966 comm=syz-executor0 03:33:44 executing program 2: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000300)=@ax25, &(0x7f0000000200)=0xff95) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r5 = gettid() ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r5, 0x1004000000016) 03:33:44 executing program 6: dup(0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xfffffffffffffffd}]}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a695", 0x5b, r4) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x0, 0x9f8, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r5, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) [ 438.500286] FAT-fs (loop0): bogus number of FAT structure [ 438.506193] FAT-fs (loop0): Can't find a valid FAT filesystem 03:33:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) accept(r2, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000380)=0x80) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:44 executing program 7: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x1f, 0x0) read(r0, &(0x7f0000000140)=""/117, 0x75) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @local}}, 0xffffffffffffffc1, 0x1f, 0xffff, "b101c506469ca33f9d03887202b732a2090f12a95a723685045c870982b376b3a7d4cb27a03f87756a20e7a2ff3590d5901c2ea7cd2657eac1d4f672a8bd06990076f432570d440ad9d2d1b623316675"}, 0xd8) 03:33:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:44 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) [ 438.612255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33025 sclass=netlink_route_socket pig=26982 comm=syz-executor0 [ 438.672910] binder: 26984:26992 Acquire 1 refcount change on invalid ref 0 ret -22 [ 438.698423] binder: 26984:26992 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 438.784232] binder: 26984:26999 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 438.794688] binder: 26984:26999 unknown command 1704546753 [ 438.808219] binder: 26984:26999 ioctl c0306201 20000040 returned -22 [ 438.823662] binder: 26984:26999 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e", 0x9, 0x101}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000280)="2420263802cd25e7b34a13e9494761ecf182829bc9eb2c1e55e4c1ca670790f2272150befd1bd1db148d6613379b045f107000c3d038b856475c476d84284a7c842613710340ca4d8eeba5c5c22c0868813b18ee0d0cbdad51c2aaf2fc36ce6e4be670a74b67ebf6c274564ec56fd5069d6c7b3db11710cb1aa7d04a91e5428694101bef0eb33ca9467e1a70528edb9e71", 0x91) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x8) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup2(r1, r2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) read(r3, &(0x7f00000000c0)=""/85, 0x321) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000540)={0x2, 0x0, 'client1\x00', 0x0, "2528ef9d47f30139", "90a25b8cfe3a1bf731120f2cccc5b7917574b406d5897762d8c3edf724c55ad9", 0x8, 0x9c6}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x7, 0x1}, 'port1\x00', 0x60, 0x80000, 0x0, 0x2, 0xa417, 0x8, 0x1ff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00'}) r4 = geteuid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000700)={0xa0, 0x19, 0x1, {0x1420, {0x4, 0x0, 0x1}, 0x100, r4, r5, 0x100000000, 0x1, 0x5a, 0x7fffffff, 0x1, 0x7, 0x6, 0x400, 0x123, 0x1, 0x100000000, 0x0, 0x0, 0x10000, 0x6}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[]}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 03:33:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:44 executing program 5: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000300)=@ax25, &(0x7f0000000200)=0xff95) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r5 = gettid() ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r5, 0x1004000000016) 03:33:44 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000340)) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x8, 0xd773, 0xfb, &(0x7f0000000140)="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"}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/148, 0xffffffffffffff3c}], 0x1000000000000101, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x2a2, 0x10400003) 03:33:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0xffffffffffffff8e) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000540)=""/166) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') sched_setaffinity(0x0, 0xfffffffffffffc58, &(0x7f0000000200)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000500)=0x6, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r4 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000018c0)="a3be8ede202032c179a0ba7889a4a4316d9e85d76b6ab4168f24f28e08a5673e673f1335ed5a7f3dc0912aa7ffd1c8e1adbb29caa06fef8c5eaac49567fd3a35124ce9772c263748a0cbca9fe1a2ed13e5f146ffc298462316ef99d7d70aa8d849e8650193910b3d0d06d5b1618a0973eee186e91b6ef5d0bbfbe78877a82a", 0x7f, 0xfffffffffffffffd) keyctl$invalidate(0x15, r4) memfd_create(&(0x7f0000000440)='\x00', 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x7b6cc922, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f00000003c0)=0x68) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000001940)=""/4096) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000480)={{0x3, 0x30000000000}, 0x1, 0x2, 0xce, {0x0, 0x1}, 0x2, 0x4}) keyctl$get_security(0x11, r4, &(0x7f0000000340)=""/120, 0x78) 03:33:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000000400), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x68, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 'syzkaller1\x00'}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000480)={0x1000, 0x0, 0x4000000000000}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000300)) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x80) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xff01) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) fcntl$setstatus(r3, 0x4, 0x4000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000340)=0x1000) write$selinux_access(r3, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) creat(&(0x7f00000002c0)='./file0\x00', 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, &(0x7f0000000280)=0xc) ptrace$peekuser(0x3, r4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) fadvise64(r0, 0x0, 0x4, 0x4) 03:33:45 executing program 7: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xffffffe, 0x20011, r0, 0x16) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') 03:33:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) getdents(r0, &(0x7f00000004c0)=""/135, 0x35b) setresuid(0x0, 0x0, 0x0) socketpair(0x11, 0xe, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000002c0)) setreuid(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 03:33:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:45 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r0, &(0x7f00000004c0)=""/135, 0x35b) setresuid(0x0, 0x0, 0x0) socketpair(0x11, 0xe, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000002c0)) setreuid(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 03:33:45 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) [ 439.493798] binder: 27062:27065 unknown command 0 [ 439.508317] binder: 27062:27065 ioctl c0306201 20000300 returned -22 [ 439.590741] binder: 27062:27069 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 439.603750] binder: 27062:27069 unknown command 1704546753 [ 439.615126] binder: 27062:27069 ioctl c0306201 20000040 returned -22 [ 439.630703] binder: 27062:27069 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:45 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000005c0)={0x0, 0xd119}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0xb, &(0x7f0000000100)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') r4 = fcntl$getown(r0, 0x9) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000140)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) sendto$unix(r1, &(0x7f0000000200)="26277d9e6e45771a179e2c7d08d706bb4ab9628c228d784ef4826737b6cd52f8b0d4aebd0d351fb8ddcebdffd4663cb39dfbde1e447936ab09bcf4cd69e7efe0d37646a77f204f65cfb731189195f5c049e93c59833c174048606c068a", 0x5d, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x9845}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 03:33:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000180)='./file1\x00', 0x8, 0x0, &(0x7f00000001c0), 0x1, &(0x7f0000000200)={[{@shortname_lower='shortname=lower'}, {@shortname_mixed='shortname=mixed'}, {@shortname_mixed='shortname=mixed'}, {@nonumtail='nnonumtail=1'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@numtail='nonumtail=0'}]}) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getdents(r0, &(0x7f00000000c0)=""/122, 0x7a) 03:33:45 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'bcsf0\x00', 0x4}, 0x18) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) epoll_create1(0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) 03:33:45 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) 03:33:45 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 03:33:45 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) syncfs(r0) 03:33:45 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) [ 439.869529] device lo entered promiscuous mode 03:33:45 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10083, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x2011, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x20000, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e24, 0x4, @mcast1, 0x1}, 0x1c) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000640)) write$binfmt_elf32(r0, &(0x7f0000001000)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001e80)={'bridge_slave_0\x00', 0x0}) sendmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000680)="d491693519918db67493d19f2c156bf8c69512c9d4396c3cac253174b3d2fae8721b17d70f39837e98fba8f56e01536f29b188ff155342afc088b484d01df3fe0484f60e4f581a1bffa837337105eff5404db2e5e9bb5bc941c6396e1a2bc7bdee2dac2da5c043c4294729670df469aac93b19ac1c3705ebeb74bc2089ce55ab87079ab712d3fa640861923d6090a0338f945d5b85c915398c1953cc51f720d5b40280779d28df15594a51c0d795c5556660301bebd98ce92c3764896e597dc66939a0b49ecc740fb754", 0xca}, {&(0x7f0000000780)="7756c60c4a0f840b39e1255bb8b3ed21e811b77f9eb757c2c5167493774013afd43db5867247ebe42395c7293acba55310c96afa66fda5ca5fa5bea5cda62182559e863e150449682240a94138ff7f32ea6e5f699409ff14d365ff5671ecb01efc5c9283b1575bdd587f83825d7816aee6486729d35269a9e6370a5d8e3d0cec84c88dd8fcde694d195bd8beed276be4f0abdaacffbfdd2389f74a815bfcf88143ba2be5ed4e77543980919de3717a710e608a96293aa02bb027a8542fececc6c8a582aedf45876c96a289bb9ff6bacc9db1e7fa05a69581cb4c40f17fb86ed615c08745c288", 0xe6}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000880)="6b2206cdc94607c2ef86722fef68dfbb815f8493bb76679d7cd1f6e37ec5fd3845b5a07a21f9f11a7c07af77b72c5714329abc652226089bfdc63381e8f0793fe3a67ae7031e38b85d4c76fedcd0faa346c99f38e479ddf250bc846315e27f1e018d", 0x62}, {&(0x7f0000000900)="0e1df42f09097751ca1f4717491c80acad3cf76d565ade30843a34d387ae7dfe34f74f6b80969334437fcf90ceec5d9e92cab143536762330d0df927839de2dbdf0be622546c30ece031e29dff4bd02c30f7610455fc2e2a6c1922c0785d77a6abc037e0268dcb174346ae72d064e921bba18d76b0", 0x75}, {&(0x7f0000000980)="f134ca604a16a8cf219d0f2854fcf7961296a6c10b26ee35b17aa806bbc4d42f368cc6aa868e80d232f329faaa16dca2f8", 0x31}, {&(0x7f0000001a00)="9e30dfbd99a4a4eb166ea7241b88e2f27dc4ccf0fa0661520f2da6f11a40245e208d043c4d9ea2b7c61cca38ad686e462657d388261c18c98cd932fb123d0aea059b280454a52d4d3be69a0060831e64122741558b66f27e1f", 0x59}], 0x7, &(0x7f0000001b00)=[{0xa0, 0x109, 0x80000001, "118290eb794d2691a8276506ead87743ac6e2006bf363e75576a9680ee58ca3fff85dd31a6f80bfa6ace8727d0929f5a7f97d069e4727f35556569920e7d06dda64cce69ac036d879c8951b6a4d2d15ca407b67abe7fa14168f15739f5d5b11dae57050069c862814376cb6140c01b73e1f382c83daf232b9aa496f1aa4bbb8c6c13c8a96a8d2dcfa2"}, {0x110, 0x11, 0x8000, "d419291be9ee28c3e68f22117586f6e612bb35f918c941ecfe6a9ae57c8924d4f55440ecfbecd6822c2adf7dd9f346e721486aec6c97f477cba6d154e3e90ed5f81589a6947adff36fe35754b5c829693c3f68dd1b9d4c70bd2fd21eeb340f2b6d0d2f50ecfe1f9486c5e846dd5a1b9b4f7887cc124b6eaf44076d3b82039d0cf329c4ddbd003c98a0a63d9a6ab5091dcdf3b72765d0aa7a27693fce5e383d3b7d1df6e8cb6471cdf06fcb84d45c8a202569d69417d4836b20f1f315fb9a7cd772235438a7e4a09ad3247f7f999b750dd49cb0257c9dc5dee873d4e615fdc28597fdfca60012079a4e9e5fae3d9237d52f9fe3303894cb198f"}, {0x98, 0x103, 0x7071, "c4dd6da4b70b547fc1eef5034496350bafa0215d35ced1ad661c73ddd37840c73c1150e88c55870900d598274675b65b37ed2afb4b7c8d014743dfb85a01922da31a6501574cfceaa4d3a9274b166d3e016d7342164b7daf723f46df38fd36b9ce2c2e57d3760a02a2b64f8895124269c2ec8481cb4999ed87c18d6ab8ab2a32d873eb92a6"}, {0x108, 0x10e, 0x100, "8f3b18df30c2116a6cd37f7b0e6d1b991ed83cdda0154cdd8cb2227cd5bd03f4db0cc472b624ca8163ea5e397a05978b86f52498b5fd5f0ceb8b734a682cedb9a2354313110790131db336b3b2d36bf32f687da3f866748739d72ceef9de460dfb1c48afd43896a226d997966acde765bce21f83221697523c68b03e015c130bfa7f6d9745ad888c44a476d27be425d7aed0e5d65e16ef0c287dd26c5b6d4909d13d85bc52e0194c4de239e688b88f56aab2d00c87fd28704f77a5405d750895e379edd34335049602e8fc96538bd1749684fa7bd950c777a6cd96c83d50002ed6980b907590ff19ecef1664ffa43de0d4a90af8562543"}, {0x28, 0xff, 0x401, "7ccf4726ad03d7c8f3781b791e8d60cb7b81bc4c5f5edb29"}], 0x378, 0x800}, 0x5}, {{&(0x7f0000001ec0)=@xdp={0x2c, 0x4, r3, 0x2a}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001f40)="3598791fe97672fd", 0x8}, {&(0x7f0000001f80)="8b31b0e5d2e2f6d66f28fa3a77d73a8d441d7581110ba92eac85748bc3cbe5552a46f772cd3bd02d21851e44eb0c190d46cb8aab6667633d2f0674bbc9fa37ec0f8d30bd9af88818ce1b1ebcc24a4d6a2d174ab990e1e85c45cee17c5f28f6a6761b321a990080de01dd69ed8b74e466dc6f60801f0bc672c04d4a1a8882ec4ebc1b5d4bb1f5c984d97c316a7840b33623463264253938910a61cef319180489f6b5221ec4", 0xa5}, {&(0x7f0000002040)}, {&(0x7f0000002080)="c052062bec360617eb62e08da68523b46164f9e953e63910a57108e4739dd4c840c8e5b465af704b0a09c3992991cda6abb37ff2062e8a0981d6c8a4fc44e114147a7f70f7d658f79543545ba19fe01d953ef769fa49ad1c3b98db6746299dde1ab01c9a5756abc653f50749c971", 0x6e}, {&(0x7f0000002100)="4e59bc4ce1430e0cc02be39caa2a816b8a2689d7a1589778a61cb576c217ddf2943b430f6c70046b80468f43f2ee5962c8bb711bd6e5c25f5af55dab539abd5be12d254dd56801a0e0ca1d25841151dae8c748f1e762ced265141060a6fc9c27b1b1a1832d9bbefd73da2d6785c8a892446f60b1dbbe55fefa1cb95fbcef49f270c2dff2048558adf6c1168afce70876e0c0e4e22540815b63119067ce2b3e892a12321f78391840fd731a70e35137f3c0e9622259a25ddf5002e7117a5716c19b84fde94b67976de15d95940ebf16c8218404466aacfb21d2be26c8d3d2ddeda58a0a7e8ae3c66f5b94e8923b76", 0xee}, {&(0x7f0000002200)="15ec633b87a5edc7d92221d46865421aad62d6ca9d2f1e9f3e6f6f26d72a3cad700ba51caabd6d105e5a2685c76fb666d7b8b39d43146b108369d0cd945242623ed303b3489d18f636f44398788a68784c3e2e6fb77b71f4103fc83fa22909e6561ca4fd8863ad1e1661db29ceb2bdd74e748b13d63c8c15cad7e24c31d41e2146f59dae9c3ae289881e4095cac3f8ae0600395be9c7cde32fb8b7b1e7d4be65102d8429406eb26ff7b052f872592dd7575d1f0cd9ccb79c8d7daa90e7ac2c1cf2179ea704df1687a07d9326365612853ddb72e40fa85f793c9cb4dcdbfe3093f305fc3e9d818bdda046", 0xea}, {&(0x7f0000002300)="cc9fc97796159e1c4af4a3b044f08380c9d7419d40abb5f7b491fab1d13b218f175f2aab4f0fd5b721c0b59239e20695713d2d82e292173c790e7a29a8020998b7a4d0e861effeab4a34c7eee726ff23caa983cbe05629ab749b0b0154d8c4716d746fd7a0363cfefdf6b9548e125c8ac21668822968d885c66241c5ea188991b0d418583f13688641966f6d4af9fd86544f1e48fed84b2d6c6eb43231804ea4630ec6b25d89040a1fa1a563cf186232842426c06a781c0f41ac2727d88c640a4ca5309f92367a5a92420f923915", 0xce}], 0x7, &(0x7f0000002480)=[{0x80, 0x10c, 0x0, "a79e1cb19ede518d84d3ddce949acb43c3dd8962cee419efdee957f59e8c4da365a65996f6fb71cc24f0a055d2f701c4f52f829fb6d07fb6d516aa387af7c45dcc5006c2d45751ab08616cb073cb2e30ccd1f825ecac04e14e53eb95b1312f5a7fa0059521f380ec88ffc806e07c"}, {0x108, 0x106, 0x2000, "6d65356857465699ad0defd2f6a7972855ebd4b38e3a0a66953c6a00e7b75f85c40471c3a3eabe9276b0e6c4ef043016e5003276b4e4018034593e60bbed828864e5301243aea7cdc8717ec5f50ab5f500b2758f41d77e389b014ee2f6a5710585613d4da73897dc5813b1dbbdec9d72fe98e7d38bb3a03867a0cb0633568b86bc373303bd3f6025f4153ea389c79b838a29b32443fbbc69f494eb0f25aba619d36b433706264c65a8a264afdce78df0572ef976157148d6124da8e3468a8a01cedafc387077652632f2af43d9e4ac6d075887d1901569dd846d653ffed82454844e1bcf0e47547175b813e25bf3d491c608"}, {0x90, 0x107, 0x3, "1d1bf2ce031f19e42fef1ca20a0d63b7214502070c82805dfaf69a8a318db9aa3745d7d40be2894489ebdca2b6cc815f1162ae9499bb9284597df7747d4558011c8713a8fc3cac842f0eaa823df2f6048cd5e37762907a470b9d8ef4c894496e78d6964c295de92a4cd8d2106073bc57667d123bc25f3a44618c26eeb49e73"}], 0x218, 0x20044000}, 0x2}], 0x2, 0x810) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in=@loopback, @in=@local, 0x4e23, 0x0, 0x4e21, 0xffffffffffffffff, 0xa, 0x80, 0xa0, 0x16, 0x0, r4}, {0x8, 0x1, 0x8, 0xf, 0x3, 0x100000001, 0x9, 0x4}, {0x1, 0xe4, 0xffffffffffffffe0, 0x9}, 0x3f, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d6, 0x7c}, 0xa, @in=@local, 0x3502, 0x2, 0x0, 0x0, 0x7fffffff, 0x1, 0x10000}}, 0xe8) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)={0x4}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@local}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) getuid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000500)) r6 = getpid() getpgrp(r6) write$selinux_user(r2, &(0x7f00000004c0)={'system_u:object_r:newrole_exec_t:s0', 0x20, 'sysadm_u\x00'}, 0x2d) [ 439.949415] device lo left promiscuous mode [ 439.979738] binder: BINDER_SET_CONTEXT_MGR already set [ 439.985152] binder: 27045:27052 ioctl 40046207 0 returned -16 [ 440.151313] device lo entered promiscuous mode [ 440.158757] device lo left promiscuous mode 03:33:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000000400), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x68, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 'syzkaller1\x00'}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000480)={0x1000, 0x0, 0x4000000000000}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000300)) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x80) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xff01) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) fcntl$setstatus(r3, 0x4, 0x4000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000340)=0x1000) write$selinux_access(r3, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) creat(&(0x7f00000002c0)='./file0\x00', 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, &(0x7f0000000280)=0xc) ptrace$peekuser(0x3, r4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) fadvise64(r0, 0x0, 0x4, 0x4) 03:33:46 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 03:33:46 executing program 5: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/159, 0x9f}], 0x1) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x8}) 03:33:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) 03:33:46 executing program 7: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000001c0)=""/104) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0xc0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x6, 0x100000000, 0x400, {0x77359400}, 0x0, 0x4fb}) 03:33:46 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000005c0)={0x0, 0xd119}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0xb, &(0x7f0000000100)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') r4 = fcntl$getown(r0, 0x9) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000140)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) sendto$unix(r1, &(0x7f0000000200)="26277d9e6e45771a179e2c7d08d706bb4ab9628c228d784ef4826737b6cd52f8b0d4aebd0d351fb8ddcebdffd4663cb39dfbde1e447936ab09bcf4cd69e7efe0d37646a77f204f65cfb731189195f5c049e93c59833c174048606c068a", 0x5d, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x9845}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 03:33:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)}) [ 440.315839] binder: 27122:27128 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:46 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x5, 0x2, 0xfffffffffffffffd}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) [ 440.344961] device lo entered promiscuous mode [ 440.380979] device lo left promiscuous mode [ 440.390463] binder: 27133:27138 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:46 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) ioctl$sock_ifreq(r0, 0x8969, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_map={0x2, 0x80000000, 0x0, 0x9, 0xc8b4, 0x9}}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x102, 0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x200400, 0x0) connect$l2tp(r2, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20}, 0x3, 0x0, 0x1, 0x2}}, 0x2e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000100)="04e30f13b28fd37389c339cdcc7e7cffd0df4dad01b96ee18239c20ba3f64a9f3a1355158111c84ebbadd0b3fcf760c6c91612255f131868fe32e001e58df3245fe0be008b95e919544ac4717e4349adcbe8c09da44b9ce49a8af106a12b8221ddeb2335b36e0f7b615a73b7eb4117ac86032502f302d6d5788d77213c54c60d4dd392374dace58f51ee695dd413b0c937022241fa761c9db7919da89d104cd06598f71230c9f038252ff490f2e464e1261d9a7089e1302ee592d47175a6905047c9eec375") ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) 03:33:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x204000, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000200000000a0000007359aa081d61354e119b022074d8cf6a479f18d8bd022da50f7c0000000000000000"], 0x14}}, 0x0) [ 440.425416] binder: 27122:27136 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 440.456653] binder: 27133:27147 unknown command 0 [ 440.472480] binder: 27133:27147 ioctl c0306201 20000300 returned -22 03:33:46 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x40000, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/128, 0x80}, {&(0x7f0000001380)=""/45, 0x2d}, {&(0x7f00000013c0)=""/170, 0xaa}, {&(0x7f0000001480)=""/52, 0x34}], 0x8, 0x8) socketpair(0x5, 0x806, 0x7fff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 03:33:46 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) 03:33:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10}, 0x10}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000001c0)={0x5, 0x200000000000000, 0x1, 0x7, 0x40, 0x401}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000140)) [ 440.507843] binder: 27122:27156 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 440.525587] binder: 27122:27156 unknown command 1704546753 [ 440.540474] binder: 27122:27156 ioctl c0306201 20000040 returned -22 03:33:46 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/62) getsockname$netlink(r0, &(0x7f00000001c0), &(0x7f0000000140)=0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x4, 0x4, 0x7}}) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x400000) socket$inet6_udplite(0xa, 0x2, 0x88) iopl(0x6) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000040)=""/73, 0x49, 0x40000100, 0x0, 0x0) [ 440.559394] binder: 27122:27167 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 440.581882] binder: 27133:27164 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:33:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 03:33:46 executing program 5: socketpair$inet(0x2, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) r3 = dup(r0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x530, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x800) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4050001}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xba}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000400)) getsockopt(r3, 0x7, 0x4, &(0x7f0000000440)=""/6, &(0x7f0000000480)=0x6) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in6}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000600)={{0xa, 0x4e24, 0x8, @mcast1}, {0xa, 0x4e24, 0x5, @local, 0xfff}, 0x1ff, [0x40, 0x8000000000000, 0xfffffffffffff001, 0x100000000, 0x9, 0xce19, 0xfc, 0x7]}, 0x5c) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='fuse\x00', 0x800, &(0x7f00000007c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read'}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}]}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000008c0)) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000940)={0x34, 0x0, &(0x7f0000000900)}) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000980)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xcc, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x10) r8 = dup3(r1, r1, 0x80000) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f0000000bc0)={0xfff}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000c00)={0x1, 0x6}, 0x8) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000c80)={0x6, 0x7ff, 0x6, &(0x7f0000000c40)="6ca9f8e4e166"}) connect$inet6(r3, &(0x7f0000000cc0)={0xa, 0x4e24, 0x4, @loopback, 0x2}, 0x1c) recvfrom(r9, &(0x7f0000000d00), 0x0, 0x1, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000d40)='/selinux/relabel\x00', 0x2, 0x0) creat(&(0x7f0000000d80)='./file0\x00', 0x181) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000dc0)) ioctl$sock_proto_private(r9, 0x89eb, &(0x7f0000000e00)="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") [ 440.581889] binder: 27133:27164 unknown command 1704546753 [ 440.581897] binder: 27133:27164 ioctl c0306201 20000040 returned -22 [ 440.582092] binder: 27133:27164 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 441.101032] binder: 27122:27167 Acquire 1 refcount change on invalid ref 0 ret -22 [ 441.151898] binder: 27122:27156 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000000400), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x68, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 'syzkaller1\x00'}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000480)={0x1000, 0x0, 0x4000000000000}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000300)) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x80) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xff01) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) fcntl$setstatus(r3, 0x4, 0x4000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000340)=0x1000) write$selinux_access(r3, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) creat(&(0x7f00000002c0)='./file0\x00', 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, &(0x7f0000000280)=0xc) ptrace$peekuser(0x3, r4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) fadvise64(r0, 0x0, 0x4, 0x4) 03:33:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 03:33:47 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) write$binfmt_elf32(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0xa2c, 0x800, 0x8, 0x0, 0x3e, 0xffffffffffffffe0, 0x38e, 0x38, 0x0, 0x1, 0x8f2a, 0x20, 0x1, 0x0, 0x3, 0x1}, [{0x6474e551, 0x0, 0x2, 0x432, 0x0, 0xff7, 0x5, 0x80}], "e22679e937a9a2506e13346ec7d57c7541684f770574584fa16b463deb7017d9f0c0aec8cd4fbe8512bde32175dd8300ace377d661792f4fe2", [[]]}, 0x191) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000003c0)=0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)={0x3c1, 0x6f, 0x1, {0x1, [{0x0, 0x0, 0xffffffffffffffff}]}}, 0x16) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)=""/57, 0x39) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xec, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x100}]}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x28cd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) write$P9_RLOCK(r1, &(0x7f0000000500)={0x8, 0x35, 0x2}, 0x8) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) epoll_create1(0x0) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f0000000000)={0x2, 0x9, 0xffffffffffff762f, 0x3ff, 0xff, 0x2}) 03:33:47 executing program 7: socketpair$inet(0x2, 0x5, 0xf6a3, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000008c0)={'syz0', "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"}, 0xff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x10d800) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000380)=0x9) r2 = memfd_create(&(0x7f0000000480)="00eb0c432d0174df5f00", 0x3) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0xffffffffffffffab, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) fdatasync(r1) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000002d40)={@remote, 0x0}, &(0x7f0000002d80)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) ioprio_get$uid(0x3, r4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540)) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x10001, 0x2, 0xa0, 0x80, 0x7f, r3, r4}, {0x80, 0x7, 0x2, 0x0, 0x8001, 0xa9b, 0x7, 0xffff}, {0xff, 0x761, 0x458, 0x1}, 0x40, 0x6e6bb4, 0x0, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x5, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x40, 0x34ff, 0x1, 0x3, 0x7ac, 0x2, 0x3a2c, 0x5}}, 0xe8) sendmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x2, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000400)=ANY=[]}, 0x2}], 0x1, 0x4040000) ioctl$LOOP_CLR_FD(r1, 0x4c01) fadvise64(0xffffffffffffffff, 0x0, 0x7fff, 0x7) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x37, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_getoverrun(r5) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000780)=""/187, &(0x7f0000000840)=0xbb) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974f92e2f6465762f66756c6c00df8ea4a00d7939dc71b09658c4d5db1ee460a05daaa106484f1f8a2cee2946d45f1e7d0a462f33953006c21c2d"]) 03:33:47 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x20000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x30) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f00000000c0)) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 03:33:47 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4004510f, &(0x7f0000000000)) 03:33:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="71eaa6d8659c04fb"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000000200)='\f'}) socketpair(0x8, 0xa, 0x44c0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x9) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/29, &(0x7f00000002c0)=0x1d) r5 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x5d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f630c4000000000400000e934911c00c1519965cba618c2c643f4b736de641aca7ad43612fcfc8afd5ac6ba965da94f04aab1febafd41b1c0954f56da13bae3fcffb4d46914569719f6cc12a343d322bf516ca8343621235016d6d337"], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$KDSETMODE(r4, 0x4b3a, 0x400) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000100)}) poll(&(0x7f0000000300)=[{r4, 0x20}, {r4}, {r5, 0x8}, {r1, 0x2483}, {r0, 0x200}], 0x5, 0x2) 03:33:47 executing program 4: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) inotify_init() r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x8, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$TIOCSBRK(r8, 0x5427) ioctl$TCXONC(r8, 0x540a, 0x3ff) [ 441.196680] binder: 27122:27156 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 441.206714] binder: 27122:27156 unknown command 1704546753 [ 441.212433] binder: 27122:27156 ioctl c0306201 20000040 returned -22 [ 441.219511] binder: 27122:27156 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)='^\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r2, r3) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000), 0x4) 03:33:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) [ 441.271333] binder: 27214:27219 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0x4e20, @loopback}}}, 0x88) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x3}, 0x8) 03:33:47 executing program 5: sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000180)={0x0, 0xdd0, {0x57, 0x3, 0x7fffffff, {0x4, 0xea}, {0x1, 0x1ff}, @rumble={0x1}}, {0x55, 0x8, 0x1, {0x8001, 0x7}, {0x5, 0x5}, @rumble={0x9, 0xfff}}}) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) [ 441.327864] binder: 27214:27219 unknown command -660149647 [ 441.360573] binder: 27214:27219 ioctl c0306201 20008fd0 returned -22 03:33:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000140)={0x18, 0x1, 0x0, {0xffffffff}}, 0x18) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x2}, 0x8) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) [ 441.396747] binder: 27214:27219 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 441.409373] blk_update_request: 120 callbacks suppressed [ 441.409378] blk_update_request: I/O error, dev loop0, sector 0 [ 441.435866] binder: 27214:27219 unknown command 1704546753 [ 441.442180] binder: 27214:27230 unknown command 0 03:33:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="c161502838d8ec5eff53ae1e45d1e51abebc1e7465ef1321711f539862c7ef989bbb610027a60aa3d8ea7e294d816f5acb654f3e5239749d8049e285a4ba6c5c4bc9418f90669ddfc2db9d73097552201b35a85e9bb87b770a50c190a7bd73588b629c130c5ff45581", 0x69}, {&(0x7f00000000c0)="6069987a327f7548af8c718e84bad2aabfeeeab7d6f72b72b82bcdbc4e45b85c32bd132908fc9f0a6f431d3b47f3f226f0bc", 0x32}], 0x2) 03:33:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) write$9p(r2, &(0x7f00000001c0)="312764340243dfe181e2931e48d4ac88ae774d7e7b27c4e12e97ac44d10b06ea0fa76ed5ce4446020f45d5b8552f849536d6d7b579000fdd6c322c8992c3b0bdd90549fb4762d92360284e7ff86438577a87f680a5b6c8ed5577c3bfb74b087104e58222876ec5b0aed5c3108b873eb4132d00fe3792ee644def0f7bce9711dc753b9962071243cc80b2b583e870d42642bc4f62835161ee1cd7731c25339dd3d19517c8f62baf7d5868bcb0b14bb4a7d99f4610ffa34a384eca68d5ef4d160e5d9b9f3f21585b346d0df8baed0d2ca36a58a723bf59b7065e882f11600f514f521a0da1dbcf8288f225a2390819", 0xee) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000280)}}, &(0x7f0000044000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:33:47 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x40, 0x68c2}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [], 0xa, &(0x7f00000000c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) [ 441.442190] binder: 27214:27230 ioctl c0306201 20000180 returned -22 [ 441.474302] blk_update_request: I/O error, dev loop0, sector 0 [ 441.546402] binder: 27214:27219 ioctl c0306201 20000040 returned -22 03:33:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000000400), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x68, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 'syzkaller1\x00'}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000480)={0x1000, 0x0, 0x4000000000000}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000300)) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000140)=ANY=[]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x80) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xff01) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) fcntl$setstatus(r3, 0x4, 0x4000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000340)=0x1000) write$selinux_access(r3, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) creat(&(0x7f00000002c0)='./file0\x00', 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, &(0x7f0000000280)=0xc) ptrace$peekuser(0x3, r4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) fadvise64(r0, 0x0, 0x4, 0x4) 03:33:48 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x28000) ftruncate(r1, 0x7) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = creat(&(0x7f0000000180)='./file0\x00', 0xa0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000240)={0x8, 0x100000000, 0x170, 'queue1\x00'}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000001400c6da0000000b000000000066ce656d316e6f246576656d31000000000000000000f386616a1a0a3c0000000000002c0e0000000000619fcd3823b7c94f5a3276ce8c9461000000000000051c0005000000000079737465746a48be1b31486dcc6370757365746367726f757024a3d030914ce145fe700471595c"], 0x90) [ 715.996246] INFO: task syz-executor1:27250 blocked for more than 140 seconds. [ 716.003541] Not tainted 4.9.124-g6a1b592 #30 [ 716.008582] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.017002] syz-executor1 D28744 27250 23486 0x00000004 [ 716.022754] ffff880199b6c800 0000000000000000 ffff8801d95c6a00 ffff8801d9a6b000 [ 716.030807] ffff8801db321c18 ffff8801c57c7750 ffffffff839f0afd ffffffff81237da7 [ 716.038963] 0000000000000000 ffff880199b6d0c0 0000000600000007 ffff8801db3224e8 [ 716.047009] Call Trace: [ 716.049579] [] ? __schedule+0x64d/0x1bd0 [ 716.055341] [] ? mark_held_locks+0xc7/0x130 [ 716.061498] [] ? rwsem_down_read_failed+0x1df/0x320 [ 716.068195] [] schedule+0x7f/0x1b0 [ 716.073469] [] rwsem_down_read_failed+0x1e4/0x320 [ 716.080143] [] ? rt_mutex_futex_unlock+0x10/0x10 [ 716.086980] [] ? avc_has_perm_noaudit+0x2ad/0x450 [ 716.093464] [] ? avc_has_perm_noaudit+0xa3/0x450 [ 716.099952] [] call_rwsem_down_read_failed+0x18/0x30 [ 716.106734] [] down_read+0x52/0xb0 [ 716.112024] [] ? lookup_slow+0x141/0x470 [ 716.117788] [] lookup_slow+0x141/0x470 [ 716.123317] [] ? page_put_link+0xd0/0xd0 [ 716.129143] [] walk_component+0x716/0x1bb0 [ 716.135023] [] ? __inode_permission2+0x9b/0x2d0 [ 716.141384] [] ? path_init+0x1580/0x1580 [ 716.147118] [] ? link_path_walk+0x8a7/0x1200 [ 716.153163] [] ? walk_component+0x1bb0/0x1bb0 [ 716.159352] [] ? lockdep_sb_freeze_release+0x83/0x90 [ 716.166333] [] path_lookupat.isra.41+0x186/0x410 [ 716.172732] [] ? exit_robust_list+0x220/0x220 [ 716.178926] [] filename_lookup.part.55+0x177/0x370 [ 716.185497] [] ? filename_parentat.isra.53.part.54+0x3d0/0x3d0 [ 716.193165] [] ? getname_flags+0xc7/0x580 [ 716.199044] [] ? strncpy_from_user+0x20d/0x2d0 [ 716.205270] [] ? getname_flags+0x23a/0x580 [ 716.211194] [] user_path_at_empty+0x53/0x70 [ 716.217587] [] path_listxattr+0xa0/0x140 [ 716.223291] [] ? listxattr+0x180/0x180 [ 716.228869] [] ? SyS_read+0x1c0/0x1c0 [ 716.234311] [] SyS_listxattr+0x2a/0x40 [ 716.239915] [] ? SyS_fgetxattr+0x160/0x160 [ 716.245800] [] do_syscall_64+0x1a6/0x490 [ 716.251543] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 716.258560] [ 716.258560] Showing all locks held in the system: [ 716.264866] 2 locks held by khungtaskd/520: [ 716.269210] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 716.278020] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 716.287767] 2 locks held by getty/3773: [ 716.291716] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 716.301212] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 716.311315] 1 lock held by syz-executor1/27235: [ 716.316030] #0: (&sb->s_type->i_mutex_key#19){++++++}, at: [] lookup_slow+0x141/0x470 [ 716.326463] 1 lock held by syz-executor1/27250: [ 716.331163] #0: (&sb->s_type->i_mutex_key#19){++++++}, at: [] lookup_slow+0x141/0x470 [ 716.341543] 1 lock held by syz-executor1/27275: [ 716.346251] #0: (&sb->s_type->i_mutex_key#19){++++++}, at: [] lock_mount+0x8c/0x2c0 [ 716.356426] [ 716.358034] ============================================= [ 716.358034] [ 716.365119] NMI backtrace for cpu 0 [ 716.368800] CPU: 0 PID: 520 Comm: khungtaskd Not tainted 4.9.124-g6a1b592 #30 [ 716.376051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.385388] ffff8801d8607d08 ffffffff81eb95e9 0000000000000000 0000000000000000 [ 716.393496] 0000000000000000 0000000000000001 ffffffff810b9fa0 ffff8801d8607d40 [ 716.401492] ffffffff81ec4927 0000000000000000 0000000000000000 0000000000000003 [ 716.409501] Call Trace: [ 716.412075] [] dump_stack+0xc1/0x128 [ 716.417643] [] ? irq_force_complete_move+0x320/0x320 [ 716.424442] [] nmi_cpu_backtrace.cold.2+0x48/0x87 [ 716.430969] [] ? irq_force_complete_move+0x320/0x320 [ 716.437709] [] nmi_trigger_cpumask_backtrace+0x12a/0x14f [ 716.444796] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 716.451894] [] watchdog+0x6b4/0xa20 [ 716.457154] [] ? watchdog+0x11c/0xa20 [ 716.462637] [] kthread+0x26d/0x300 [ 716.467816] [] ? reset_hung_task_detector+0x20/0x20 [ 716.474466] [] ? kthread_park+0xa0/0xa0 [ 716.480069] [] ? __switch_to_asm+0x34/0x70 [ 716.485935] [] ? kthread_park+0xa0/0xa0 [ 716.491546] [] ? kthread_park+0xa0/0xa0 [ 716.497150] [] ret_from_fork+0x5c/0x70 [ 716.502877] Sending NMI from CPU 0 to CPUs 1: [ 716.507456] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff83a00606 [ 716.514855] Kernel panic - not syncing: hung_task: blocked tasks [ 716.520998] CPU: 0 PID: 520 Comm: khungtaskd Not tainted 4.9.124-g6a1b592 #30 [ 716.528312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.537660] ffff8801d8607cc8 ffffffff81eb95e9 ffffffff83c8c0a0 00000000ffffffff [ 716.545654] 0000000000000000 0000000000000000 dffffc0000000000 ffff8801d8607d88 [ 716.553654] ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6 [ 716.561720] Call Trace: [ 716.564291] [] dump_stack+0xc1/0x128 [ 716.569642] [] panic+0x1bf/0x3bc [ 716.574649] [] ? add_taint.cold.6+0x16/0x16 [ 716.580604] [] ? ___preempt_schedule+0x16/0x18 [ 716.586824] [] ? nmi_trigger_cpumask_backtrace+0x100/0x14f [ 716.594085] [] watchdog+0x6c5/0xa20 [ 716.599345] [] ? watchdog+0x11c/0xa20 [ 716.604778] [] kthread+0x26d/0x300 [ 716.609948] [] ? reset_hung_task_detector+0x20/0x20 [ 716.616605] [] ? kthread_park+0xa0/0xa0 [ 716.622214] [] ? __switch_to_asm+0x34/0x70 [ 716.628232] [] ? kthread_park+0xa0/0xa0 [ 716.633840] [] ? kthread_park+0xa0/0xa0 [ 716.639453] [] ret_from_fork+0x5c/0x70 [ 716.645286] Dumping ftrace buffer: [ 716.648939] (ftrace buffer empty) [ 716.652633] Kernel Offset: disabled [ 716.656249] Rebooting in 86400 seconds..