e) syz_open_procfs(0x0, 0x0) 08:39:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000, 0x3, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}) 08:39:30 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) readv(r0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135, 0x87}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fcntl$getown(r0, 0x9) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffbf, 0x1) close(r0) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xff79, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000100)=0x8) r3 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, 0x8) r5 = memfd_create(&(0x7f0000000200)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) fcntl$setlease(r5, 0x400, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) io_setup(0x9, &(0x7f0000001280)=0x0) io_destroy(r6) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) 08:39:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0cb8bcfa0abb549f9fa97963"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c4000003c00"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x2fe) [ 537.834544] binder: 15278:15303 unknown command 12 [ 537.839608] binder: 15278:15303 ioctl c0306201 200001c0 returned -22 [ 537.849290] binder: undelivered death notification, 0000000000000000 [ 537.906200] binder: 15305:15306 unknown command 12 [ 537.921425] binder: BINDER_SET_CONTEXT_MGR already set [ 537.929849] binder: 15311:15315 ioctl 40046207 0 returned -16 [ 537.940482] binder: 15311:15315 unknown command -88295412 [ 537.946045] binder: 15311:15315 ioctl c0306201 200001c0 returned -22 08:39:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl(r1, 0x7f, &(0x7f0000000080)="81d61fdd12a92ccc1fbf1f81d2dd59fdc39fd728c46fc339fb354602c84977812c9f703c6afc413b4f9a72072c2d76c0a1a9ce27e4b51f4538eb277b86ab7af194b66dee88d568bd5cd610b88601e074beced27e95b6de356a5cdbedc5b79b897bba2b24203491a82cd526cc6ab82006d4a5352c50") r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000000)=0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 537.953467] binder: 15311:15315 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3932160 [ 537.963953] binder: BINDER_SET_CONTEXT_MGR already set [ 537.969243] binder: 15311:15315 ioctl 40046207 0 returned -16 [ 537.975242] binder: 15311:15322 unknown command -88295412 [ 537.982073] binder: 15311:15322 ioctl c0306201 200001c0 returned -22 [ 537.994408] binder: 15311:15325 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3932160 [ 538.033173] binder: 15305:15306 ioctl c0306201 200001c0 returned -22 [ 538.081184] binder: undelivered death notification, 0000000000000000 08:39:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x80000000002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2f2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff080000000000000000"], 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)) 08:39:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xce}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x212f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x57}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:32 executing program 5: time(&(0x7f0000005ac0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000005500)=0x64, 0x6dc) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000000c0)) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000005200), 0xffffffffffffffff) r1 = add_key(&(0x7f0000005980)='asymmetric\x00', &(0x7f0000005600)={'syz', 0x0}, &(0x7f00000059c0)="f84e0cad4f825044c5b3ce49e3b957cc3997c30212fea77bbce9f3d7851d4d53fc4b6e9f1d822a65d07444d2bcf953b6807a4d0cda715fb3a32c410404bc5d", 0x3f, 0xffffffffffffffff) keyctl$clear(0x7, r1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) exit(0x7fff) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000005680)=""/206, 0xce}, {&(0x7f0000000400)=""/173, 0xad}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/101, 0x65}], 0x6, &(0x7f0000000640)=""/231, 0xe7, 0xfc}, 0x1}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/173, 0xad}, {&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000d40)=""/219, 0xdb}], 0x7, &(0x7f0000000ec0)=""/157, 0x9d, 0x6}, 0x1}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/139, 0x42}, {&(0x7f0000001100)=""/181, 0xb5}, {&(0x7f0000000b80)=""/32, 0x20}], 0x3, &(0x7f0000001200)=""/32, 0x20, 0x80000000}, 0x2}, {{&(0x7f0000001240)=@ipx, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/71, 0x47}, {&(0x7f0000001340)=""/226, 0xe2}], 0x2, &(0x7f0000001480)=""/148, 0x94, 0x3}, 0x4}, {{&(0x7f0000001540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x20}, 0x945}, {{&(0x7f0000003800)=@ipx, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/42, 0x2a}, {0x0}], 0x2, &(0x7f00000039c0)=""/3, 0x3, 0x8}, 0x6}, {{&(0x7f0000003a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/74, 0x4a}, {&(0x7f0000003b00)=""/103, 0x67}, {&(0x7f0000003b80)=""/245, 0xf5}], 0x3, &(0x7f0000003cc0)=""/4096, 0x1000, 0x3}, 0x2}, {{&(0x7f0000004cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d40)=""/12, 0xc}, {&(0x7f0000004d80)=""/16, 0x10}, {&(0x7f0000004dc0)=""/72, 0x48}], 0x3, &(0x7f0000004e80)=""/38, 0x26}}], 0x8, 0x2, &(0x7f0000005100)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000005180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000005280)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000005240)={&(0x7f00000060c0)=ANY=[@ANYBLOB="02042dbd7000fcdbdf4ae03d649d2e1825050000000c000200080002004e200000080004004d000000140001000800050000000000080009007700000030000300140006000006000000000000000000ffffffffff0800030000000000080007004e2100005d0004003500000057cc8d237c282918bf40128ffd6d3b9ac482627a4173f3d26080b3c8b52e4ac76597d9a4d5c5f058fbaf5db704622f62cc1af932e0528eb34a90a84ac1c603ef5d273d347f4a000000000000004b7c3f1596b3a3b5cf68f308b7a38dd4b1daf82a3b87278b21c0492fed58e01e7d4783ff5054074ca3b4c5e95dada1f361a949d0ee460e313674d470024bb5c2596bf9a96040ca178df4d5757fb1257c3013fd4a859162d7462ca33d107e77fc50c11f8938e560522aa795b7c84cf2de19d16e42046de61e3775326e9ab668ac894a6598cd1b85c9e18c116794000000000000000000e4ffff0bad5e98480feb2de15c4fa8772cee025e11d36fda124d49edbb4dd44e2df6c616a9dcd613ab711b06be829a3bd23cca3c16214076ec41b7b3040c4ec0de1d30786c1eea5b6cd2db9ee13318668e3f575e9c3aaa51d2556f853f20b4a22c80003872f534930702ff2dfa1589b9a29e49f1fe8e205b9174e088f24e2594fa01b04945dd72a710f3ada28b3db65b9fcdcfa162319180d726b3ef000000000000000016afa17eab1a012497a75917961beaf2e5096e2ba8263c6d8d5c876df8310b3d4baf4cfb51dda18821b2cb160234a5150a633177ec64a8c959394513336b48f5b800413d77f345ca1b63b16859e6ba922a4202d9d9aed85d37da3d5ea515f117e4d0580a272dd263efd7a9287e90d24abe19f83ace4ffe6d212580841970ad1243649f62afb19562c0a15db164910aeb9da33ce6e50ecf48c582532ac8cc4b19a0ab1d23bd5d999c4db894c7a5c47856c24ccb92fd5e5504471fdc6f8c0daf113ee44f0d12e42ee8fadc29d9bd7c25af626b789db38e1a6b3261eded98ef8202137471ceb19cb83f962fbe9e8a27c336e81ae79a5fd4eb8bb52aba61222ab615e458c534365c97a91ea5119592b3247ecfd7ab9b9c8d0bcca608bcce30549e886425a25ec15bddf073a02e317e2c3e7e410f3e8e13f9aa7f7a8ab67ccb6a0b8d61f0e4de36bfe44ae3e1eefa8e30aae2394fcac545216e59223df2649343d3ae9a4d730000000000"], 0x1}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000005480), &(0x7f0000005380)=0x40) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005640)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000054c0)={'yam0\x00'}) getpeername(r3, &(0x7f0000000f80)=@xdp, &(0x7f0000003700)=0x9378cd5c96c3c709) accept$packet(r0, &(0x7f00000055c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000053c0)=0x8) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000005540)={@ipv4={[], [], @multicast2}}, &(0x7f0000005580)=0x14) getpeername$packet(r2, &(0x7f0000005900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005940)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005b00)={{{@in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000005a80)=0xfffffffffffffd0d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005c40)={'team0\x00', r5}) accept$packet(r3, &(0x7f0000005c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005cc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006080)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006040)={&(0x7f0000000300)=ANY=[@ANYBLOB="08000700000000204000040001006c625f686173685f7374617473007535e123fdcca19e00000b000000ffff0400880600003396932eaa5984a034b7e2dc04236935b8f2dd282e9e735cfcb78a000067c274c7426769882245088afed68f5e6275dac6aa6512396f3a211e52509d00000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) ioctl$TIOCEXCL(r2, 0x540c) 08:39:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @multicast2}, &(0x7f0000000240)=0xc) r2 = accept(r0, &(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x80) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000005c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x7c921c3b}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', r1}) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="698aaa91bf75f9dbcb625c66402dc8cffdc1f8639329ccac089c6da03681cdaa00ecc83b24f866abc77d0cccf67a62c0afa578bf0076b5177fc82b79a0779603e9275b2517067699f87c1a93494a24600383dd40ad94fc0085e813db26dfb754490757994a396e9f975fa8038f2dd670049f7c8da126f428b295d8e2c485bb0fdee297b203e7b067bedf630b140ed223a0fb12af08632643b603bca2b05df290771acd26888d6ec16b921b760a63a11e42339c1d72c276cb580b15f34d5c", 0xbe, 0xfffffffffffffffd) keyctl$update(0x2, r4, &(0x7f0000000340)="67bb93a5cdb5390b0c748bea6d2cdb331c9900b48935183f3b046327804d2234b3bb66b6aa054db7bd62571d0f3f11dc7f7cd33a17ea48d5b97e5c554bd1d3ba7a3229deb6fd402df50ea56be80d9558432cf6e24041dac42e7ab23a3664a281c9ac6d0cc64fdf437c765687a86fdb29d22cf0413853fd7751c658e669d54537b2ef2b6c2344c5d0ff47e655110ec11ff62e4c848f17cdfe0e04fb22944dd3ce23aad08a72140aebcf6d2ae4d617e3cba8ae61fcc3cd4bcecd461e", 0xbb) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6, @local}, 0x2f8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @dev}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) 08:39:32 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x9, &(0x7f00000000c0)={0x828}, 0x8) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8}) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r0, 0x0, 0x0, 0xcd55) 08:39:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 539.726790] binder: BINDER_SET_CONTEXT_MGR already set [ 539.732674] binder: 15346:15350 ioctl 40046207 0 returned -16 [ 539.739673] binder: undelivered death notification, 0000000000000000 [ 539.747676] binder: BINDER_SET_CONTEXT_MGR already set [ 539.753884] binder: 15346:15350 ioctl 40046207 0 returned -16 [ 539.764286] binder: undelivered death notification, 0000000000000000 08:39:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) recvfrom$unix(r0, &(0x7f0000000000)=""/11, 0xb, 0x20, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x84, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x456}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000015) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) fcntl$getflags(r4, 0x409) 08:39:32 executing program 3: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e5"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) [ 539.827128] binder: BINDER_SET_CONTEXT_MGR already set [ 539.843096] binder: 15368:15372 ioctl 40046207 0 returned -16 [ 539.862485] binder: undelivered death notification, 0000000000000000 08:39:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x100) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 539.893073] binder: BINDER_SET_CONTEXT_MGR already set [ 539.904060] binder: 15368:15387 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 539.911734] binder: 15368:15372 ioctl 40046207 0 returned -16 08:39:32 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x21, "bb6eb8d77d5c8fcf4b0ee705b957a778599cb2927cadcff2cb558f27514e13da06"}, &(0x7f0000000180)=0x45) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40001, 0x0) write$9p(r3, &(0x7f0000000400)="c44d94f76bd0cae4234c00629791d20315e2e2e0c9836fc14c06c2ee712594026a04fc35c968359d3529b5d7a51fa6646003ebda4e4255d15a2c9955ed724a7432e39e8f2e340ddb38f27e8c1c424d3c780dc89ded935b4ac67b4f5e26779845e14b902648e95d236ad89f974ab938e584d36804ca8646fce4314765e66fa66d92544aaf5b40b42b982d4d36427ec1547af20c37a41d277a3144748d1fae93646eb58ae2cafb5a18595d52436a88f6a17cbe60d8709ab48e0b39f506e32d154b8a6eae28e996c98a04b6baf6d68e40", 0xcf) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) renameat(r3, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c6000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) 08:39:32 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000300)=',ppp0bdev\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSCTTY(r0, 0x540e, 0x8001) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68200, 0x0) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0), &(0x7f0000000100)=0x4) readahead(r0, 0x0, 0x2) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200), 0x4) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000340)) r3 = fcntl$getown(r1, 0x9) ptrace$getenv(0x4201, r3, 0xffffffff00000001, &(0x7f0000000240)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002000)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000180)=0x14) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000280)) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000001c0)={0x1000, 0x20d952aa, 0x5, 0x8, 0x3}) 08:39:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xd0, "9cb8bd0df31d95c258a4fb592ac5f8a81f9fcb1566a5acee9cce06c992649eca032e5baad9a6ca0aea8c8253958db157e7cac006688f4b60f9dc6a914a060c3fbe0ad898a94fdc3dc2ab48b47b5876268efb7345061f1805f4d3b5fe4d1c93b2ac251be788ff939082aeba1aee3b719e99cde3191d77f1d7ed717c702072d375f90187a7bafc1eeb872a1a9814d11d5c1e2680a694b1c7a90f28a52417f5c02e8c64a4312908e0c2f848396a5e0147ec6c097167ca153cca8958036aa1c12a41ace02c5c8607aeec3fdfb8c3d6a7cb8d"}, &(0x7f00000001c0)=0xf4) [ 539.973743] binder: 15395:15397 unknown command 1611424527 [ 539.985109] binder: 15395:15397 ioctl c0306201 20008fd0 returned -22 08:39:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000000)) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 540.025300] binder: 15395:15397 unknown command 1611424527 [ 540.045995] binder: 15395:15397 ioctl c0306201 20008fd0 returned -22 08:39:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 540.147790] binder: 15419:15420 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:33 executing program 5: time(&(0x7f0000005ac0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000005500)=0x64, 0x6dc) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000000c0)) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000005200), 0xffffffffffffffff) r1 = add_key(&(0x7f0000005980)='asymmetric\x00', &(0x7f0000005600)={'syz', 0x0}, &(0x7f00000059c0)="f84e0cad4f825044c5b3ce49e3b957cc3997c30212fea77bbce9f3d7851d4d53fc4b6e9f1d822a65d07444d2bcf953b6807a4d0cda715fb3a32c410404bc5d", 0x3f, 0xffffffffffffffff) keyctl$clear(0x7, r1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) exit(0x7fff) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000005680)=""/206, 0xce}, {&(0x7f0000000400)=""/173, 0xad}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/101, 0x65}], 0x6, &(0x7f0000000640)=""/231, 0xe7, 0xfc}, 0x1}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/173, 0xad}, {&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000d40)=""/219, 0xdb}], 0x7, &(0x7f0000000ec0)=""/157, 0x9d, 0x6}, 0x1}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/139, 0x42}, {&(0x7f0000001100)=""/181, 0xb5}, {&(0x7f0000000b80)=""/32, 0x20}], 0x3, &(0x7f0000001200)=""/32, 0x20, 0x80000000}, 0x2}, {{&(0x7f0000001240)=@ipx, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/71, 0x47}, {&(0x7f0000001340)=""/226, 0xe2}], 0x2, &(0x7f0000001480)=""/148, 0x94, 0x3}, 0x4}, {{&(0x7f0000001540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x20}, 0x945}, {{&(0x7f0000003800)=@ipx, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/42, 0x2a}, {0x0}], 0x2, &(0x7f00000039c0)=""/3, 0x3, 0x8}, 0x6}, {{&(0x7f0000003a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/74, 0x4a}, {&(0x7f0000003b00)=""/103, 0x67}, {&(0x7f0000003b80)=""/245, 0xf5}], 0x3, &(0x7f0000003cc0)=""/4096, 0x1000, 0x3}, 0x2}, {{&(0x7f0000004cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d40)=""/12, 0xc}, {&(0x7f0000004d80)=""/16, 0x10}, {&(0x7f0000004dc0)=""/72, 0x48}], 0x3, &(0x7f0000004e80)=""/38, 0x26}}], 0x8, 0x2, &(0x7f0000005100)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000005180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000005280)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000005240)={&(0x7f00000060c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000005480), &(0x7f0000005380)=0x40) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005640)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000054c0)={'yam0\x00'}) getpeername(r3, &(0x7f0000000f80)=@xdp, &(0x7f0000003700)=0x9378cd5c96c3c709) accept$packet(r0, &(0x7f00000055c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000053c0)=0x8) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000005540)={@ipv4={[], [], @multicast2}}, &(0x7f0000005580)=0x14) getpeername$packet(r2, &(0x7f0000005900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005940)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005b00)={{{@in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000005a80)=0xfffffffffffffd0d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005c40)={'team0\x00', r5}) accept$packet(r3, &(0x7f0000005c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005cc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006080)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006040)={&(0x7f0000000300)=ANY=[@ANYBLOB="08000700000000204000040001006c625f686173685f7374617473007535e123fdcca19e00000b000000ffff0400880600003396932eaa5984a034b7e2dc04236935b8f2dd282e9e735cfcb78a000067c274c7426769882245088afed68f5e6275dac6aa6512396f3a211e52509d00000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) ioctl$TIOCEXCL(r2, 0x540c) 08:39:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x5, 0xf, 0x15, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x10000}, @sadb_x_sec_ctx={0x4, 0x18, 0x3, 0xe6, 0x15, "d74c9e88b612babfea9b156dcb785935a83253ef27"}, @sadb_sa={0x2, 0x1, 0x4d2, 0xfffffffffffffff8, 0xadfd, 0x4f, 0x1, 0x1}, @sadb_x_policy={0x8, 0x12, 0x4, 0x7, 0x0, 0x6e6bbb, 0x2, {0x6, 0x32, 0x5, 0x8, 0x0, 0x3f, 0x0, @in6=@dev={0xfe, 0x80, [], 0x28}, @in=@remote}}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}]}, 0xa8}}, 0x0) setgroups(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x6, &(0x7f00000000c0)=[r1, r1, r1, r1, r1, r1]) 08:39:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x33, 0xf0be, 0x800, 0xfffffffffffffffd, 0xfffffffffffffffe}) ftruncate(r0, 0x0) 08:39:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) signalfd4(r1, &(0x7f0000000180)={0x12d}, 0x8, 0x80800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) io_setup(0x1000000, &(0x7f0000000200)=0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x7fffffff, r3, &(0x7f0000000240)="2a6e93ce5766e94b949c1829ec52fd722dfcc28a3c4ac0e88bcc028b7d604ee1aa7e6c760bd63b34fdf23804a302714dd047ea6a830b146b", 0x38, 0xffff, 0x0, 0x2, r5}, &(0x7f0000000340)) ptrace$getenv(0x4201, r2, 0x8000, &(0x7f0000000140)) 08:39:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x5}) r2 = syz_open_pts(r1, 0x0) inotify_init1(0x800) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x80}}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:33 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001280)=""/242, 0xf2}], 0x1, 0x0) 08:39:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) fchmod(r0, 0x1) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 540.942433] binder: BINDER_SET_CONTEXT_MGR already set [ 540.948704] binder: 15430:15434 ioctl 40046207 0 returned -16 [ 540.956277] binder: undelivered death notification, 0000000000000000 08:39:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @rand_addr=0x7fffffff}, {0x0, @dev}, 0x0, {}, 'ifb0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 08:39:33 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = dup(r0) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x208, 0xa5) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x4, @mcast1, 0x101}}, 0x0, 0x8, 0x0, "9fc72b543b28dd4728c3988b7adea76fa59f716c731782304d2a8b2baf8c1724fb01b86d7c1d88f3c7322926d8f0fcdb51b5df3ba8b696320eb85ae1bd8e6af048c54f27e0dad819d7cb50aaa2bc300f"}, 0x24) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x7, 0x4) setns(r2, 0x8000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000340)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xffffff91, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x6e) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000200)) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000ffffbffe) 08:39:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r3 = getuid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={r2, r3, r4}, 0xc) [ 541.001649] binder: BINDER_SET_CONTEXT_MGR already set [ 541.007009] binder: 15430:15434 ioctl 40046207 0 returned -16 [ 541.028554] binder: undelivered death notification, 0000000000000000 08:39:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) syncfs(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 541.132140] binder: BINDER_SET_CONTEXT_MGR already set [ 541.137485] binder: 15456:15460 ioctl 40046207 0 returned -16 [ 541.146905] binder: undelivered death notification, 0000000000000000 [ 541.158455] binder: BINDER_SET_CONTEXT_MGR already set [ 541.164008] binder: 15456:15471 ioctl 40046207 0 returned -16 [ 541.171513] binder: undelivered death notification, 0000000000000000 [ 541.191261] binder: 15448:15472 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:34 executing program 5: time(&(0x7f0000005ac0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000005500)=0x64, 0x6dc) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000000c0)) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000005200), 0xffffffffffffffff) r1 = add_key(&(0x7f0000005980)='asymmetric\x00', &(0x7f0000005600)={'syz', 0x0}, &(0x7f00000059c0)="f84e0cad4f825044c5b3ce49e3b957cc3997c30212fea77bbce9f3d7851d4d53fc4b6e9f1d822a65d07444d2bcf953b6807a4d0cda715fb3a32c410404bc5d", 0x3f, 0xffffffffffffffff) keyctl$clear(0x7, r1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) exit(0x7fff) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000005680)=""/206, 0xce}, {&(0x7f0000000400)=""/173, 0xad}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/101, 0x65}], 0x6, &(0x7f0000000640)=""/231, 0xe7, 0xfc}, 0x1}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/173, 0xad}, {&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000d40)=""/219, 0xdb}], 0x7, &(0x7f0000000ec0)=""/157, 0x9d, 0x6}, 0x1}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/139, 0x42}, {&(0x7f0000001100)=""/181, 0xb5}, {&(0x7f0000000b80)=""/32, 0x20}], 0x3, &(0x7f0000001200)=""/32, 0x20, 0x80000000}, 0x2}, {{&(0x7f0000001240)=@ipx, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/71, 0x47}, {&(0x7f0000001340)=""/226, 0xe2}], 0x2, &(0x7f0000001480)=""/148, 0x94, 0x3}, 0x4}, {{&(0x7f0000001540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x20}, 0x945}, {{&(0x7f0000003800)=@ipx, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/42, 0x2a}, {0x0}], 0x2, &(0x7f00000039c0)=""/3, 0x3, 0x8}, 0x6}, {{&(0x7f0000003a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/74, 0x4a}, {&(0x7f0000003b00)=""/103, 0x67}, {&(0x7f0000003b80)=""/245, 0xf5}], 0x3, &(0x7f0000003cc0)=""/4096, 0x1000, 0x3}, 0x2}, {{&(0x7f0000004cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d40)=""/12, 0xc}, {&(0x7f0000004d80)=""/16, 0x10}, {&(0x7f0000004dc0)=""/72, 0x48}], 0x3, &(0x7f0000004e80)=""/38, 0x26}}], 0x8, 0x2, &(0x7f0000005100)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000005180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000005280)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000005240)={&(0x7f00000060c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000005480), &(0x7f0000005380)=0x40) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005640)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000054c0)={'yam0\x00'}) getpeername(r3, &(0x7f0000000f80)=@xdp, &(0x7f0000003700)=0x9378cd5c96c3c709) accept$packet(r0, &(0x7f00000055c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000053c0)=0x8) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000005540)={@ipv4={[], [], @multicast2}}, &(0x7f0000005580)=0x14) getpeername$packet(r2, &(0x7f0000005900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005940)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005b00)={{{@in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000005a80)=0xfffffffffffffd0d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005c40)={'team0\x00', r5}) accept$packet(r3, &(0x7f0000005c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005cc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006080)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006040)={&(0x7f0000000300)=ANY=[@ANYBLOB="08000700000000204000040001006c625f686173685f7374617473007535e123fdcca19e00000b000000ffff0400880600003396932eaa5984a034b7e2dc04236935b8f2dd282e9e735cfcb78a000067c274c7426769882245088afed68f5e6275dac6aa6512396f3a211e52509d00000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) ioctl$TIOCEXCL(r2, 0x540c) 08:39:34 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c00060000001900a30704000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 08:39:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x800000000) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6333b3e638a1337fe6539c826346c12cad2c7bd72af646f2da33b644c9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13535d968ebd150b089a36148a0048dc"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:34 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:39:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9801040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x17c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x165, @local, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={[], [], @local}, 0x704872fb}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @empty, 0x1f}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 542.111553] binder: BINDER_SET_CONTEXT_MGR already set [ 542.117043] binder: 15489:15492 ioctl 40046207 0 returned -16 [ 542.124786] IPv6: Can't replace route, no match found [ 542.124893] binder: 15489:15492 unknown command -1288477940 [ 542.144739] IPv6: Can't replace route, no match found 08:39:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'\xff\xff\xff\xff\x00', &(0x7f0000000040)=ANY=[]}) 08:39:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 542.163976] binder: 15489:15492 ioctl c0306201 200001c0 returned -22 [ 542.189938] binder: 15489:15492 unknown command -1772268781 08:39:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/90) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000000)={0x9, 0x200, 0x9}) [ 542.222117] binder: 15489:15492 ioctl c0306201 20008fd0 returned -22 08:39:35 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000180)="0adc1f123c123f3188b070") r2 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7}, 0xfd30) ftruncate(r2, 0x8007ffc) fallocate(r2, 0x3, 0xc080, 0x8000fff5) [ 542.267670] binder: BINDER_SET_CONTEXT_MGR already set [ 542.273397] binder: 15489:15507 ioctl 40046207 0 returned -16 [ 542.281963] binder: 15489:15524 unknown command -1288477940 [ 542.299579] binder: 15489:15524 ioctl c0306201 200001c0 returned -22 08:39:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 542.314686] binder: 15489:15507 unknown command -1772268781 [ 542.331817] binder: 15489:15507 ioctl c0306201 20008fd0 returned -22 [ 542.418472] binder: 15532:15542 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000200)="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", 0xfc) 08:39:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000840)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d57f428a5ed49f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad64c70d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8", 0x5ad, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000054c0)=[{{&(0x7f0000000180)=@can, 0x80, 0x0}}], 0x1, 0x0, 0x0) 08:39:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000e00)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$input_event(r2, &(0x7f0000005d40)={{0x77359400}, 0x0, 0x2, 0x5}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) clock_gettime(0x0, &(0x7f0000005b40)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/24, 0x18}], 0x1, &(0x7f0000000200)=""/141, 0x8d}, 0x1f}, {{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/47, 0x2f}], 0x8, &(0x7f0000000880)=""/247, 0xf7}, 0x81}, {{&(0x7f0000000980)=@rc, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/49, 0x31}, {&(0x7f0000000a40)=""/37, 0x25}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000b80)=""/100, 0x64}, {&(0x7f0000000c00)=""/251, 0xfb}, {&(0x7f0000000d00)=""/64, 0x40}, {&(0x7f0000000d40)=""/56, 0x38}], 0x7, &(0x7f0000000e00)}, 0x3}, {{&(0x7f0000000e40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000ec0)=""/214, 0xd6}, {&(0x7f0000000fc0)=""/3, 0x3}, {&(0x7f0000001000)=""/101, 0x65}, {&(0x7f0000001080)=""/158, 0x9e}, {&(0x7f0000001140)=""/128, 0x80}, {&(0x7f00000011c0)=""/154, 0x9a}, {&(0x7f0000001280)=""/63, 0x3f}, {&(0x7f00000012c0)=""/141, 0x8d}, {&(0x7f0000001380)=""/189, 0xbd}, {&(0x7f0000001440)=""/16, 0x10}], 0xa, &(0x7f0000001540)=""/169, 0xa9}, 0x2f33}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001600)=""/203, 0xcb}, {&(0x7f0000001700)=""/69, 0x45}, {&(0x7f0000001780)=""/165, 0xa5}, {&(0x7f0000001840)=""/214, 0xd6}, {&(0x7f0000001940)=""/64, 0x40}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/133, 0x85}], 0x7, &(0x7f0000002ac0)=""/186, 0xba}, 0x1}, {{&(0x7f0000002b80)=@nfc, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c00)=""/187, 0xbb}], 0x1, &(0x7f0000002d00)=""/100, 0x64}, 0x3}, {{&(0x7f0000002d80)=@rc, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002e00)=""/153, 0x99}], 0x1, &(0x7f0000002f00)=""/209, 0xd1}, 0x800}, {{&(0x7f0000003000)=@alg, 0x80, &(0x7f0000003280)=[{&(0x7f0000003080)=""/185, 0xb9}, {&(0x7f0000003140)=""/7, 0x7}, {&(0x7f0000003180)=""/217, 0xd9}], 0x3, &(0x7f00000032c0)=""/168, 0xa8}, 0x1}, {{&(0x7f0000003380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/40, 0x28}, {&(0x7f0000004440)=""/24, 0x18}, {&(0x7f0000004480)=""/132, 0x84}], 0x4, &(0x7f0000004580)=""/83, 0x53}, 0x4}, {{&(0x7f0000004600)=@hci, 0x80, &(0x7f0000004880)=[{&(0x7f0000004680)=""/13, 0xd}, {&(0x7f00000046c0)=""/182, 0xb6}, {&(0x7f0000004780)=""/247, 0xf7}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x8}], 0xa, 0x2000, &(0x7f0000005b80)={r3, r4+30000000}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000005c00)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0xa004000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x68, r6, 0x0, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7fffffff, @link='syz0\x00'}}}, ["", ""]}, 0x68}}, 0x4000010) 08:39:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000884, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4000008000000004) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 08:39:36 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/validatetrans\x00', 0x1, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x328, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000010) r4 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x5, 0x3e, 0x0, 0x15, 0x10000, 0x0, 0xfffffffffffffffa, 0x7, 0x4, 0x8, 0x7}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f00000002c0)='./file0\x00', r5, r6, 0x400) dup3(r4, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) arch_prctl$ARCH_SET_CPUID(0x1012, 0x4001) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x78, 0x0, 0x1000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400, 0x0) 08:39:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) removexattr(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00') accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 08:39:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) close(r0) geteuid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) stat(0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) [ 543.370402] binder: BINDER_SET_CONTEXT_MGR already set [ 543.376968] binder: 15553:15560 ioctl 40046207 0 returned -16 [ 543.383983] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. [ 543.403001] binder: undelivered death notification, 0000000000000000 08:39:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) rt_sigprocmask(0x1, &(0x7f0000000000)={0x1034}, &(0x7f0000000080), 0x8) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:36 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='cgroup\x00', 0x100000, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x7f) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x1f, &(0x7f00000002c0)="e620b00546c63c14dad4d9571d00ea1ba43688c2caa778534980cc64d428af1d8b8449de5e61b69939df5acd82273c50233e6fbeb892892dd73744abcc9f8d761e19e5f5ae449c40467e63636fcd3782891aa09b58a5a1e7", 0x58) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) [ 543.412858] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@gettaction={0x28, 0x32, 0x321, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) 08:39:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f0000000140)=[@request_death, @free_buffer, @enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 543.449811] binder: BINDER_SET_CONTEXT_MGR already set [ 543.464130] binder: 15553:15560 ioctl 40046207 0 returned -16 [ 543.483513] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 543.492427] tc_dump_action: action bad kind 08:39:36 executing program 4: clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 08:39:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffd25, 0x0, &(0x7f00000002c0)=ANY=[], 0x1e9, 0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x382, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0xffffffffffff8000, 0x0, 0xd3f, 0x0, 0x0, 0x4, 0x20, 0x2, 0x6769be8a, 0x1, 0x9, 0xcb, 0x8000, 0x0, 0x9, 0x0, 0x7fff, 0x5, 0x0, 0x4, 0x8, 0x3f, 0x8, 0x5, 0x7, 0xdda, 0x1, 0x9, 0x5, 0x6, 0x100000001, 0x3, 0x9, 0x4, 0x7f, 0x7, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080)}, 0x11400, 0xdc, 0x8001, 0x5, 0x3, 0x1, 0x5}, 0xffffffffffffffff, 0x5, r2, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) fsync(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x18f, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 543.504635] binder: undelivered death notification, 0000000000000000 08:39:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="0b2b2796f0d7154d33855e9f32dc136b64a3e5dcda705e75c68df003d2ec1e581b928e7e7b85345dda7d92f32b037e7e86094b2d46acd66259a50ac5dcb27f0e98517378c878086bccff6d3a2d9be0a83332e7b503021db70aae97ccb8e00d480ff69a4657b144c6220b24b4e02fa0d095210d9a5836662646db", 0x7a, 0xfffffffffffffff9) keyctl$update(0x2, r4, &(0x7f0000000440)="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", 0x1000) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:36 executing program 5: 08:39:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) [ 543.557543] binder: BINDER_SET_CONTEXT_MGR already set [ 543.573403] binder: 15598:15600 ioctl 40046207 0 returned -16 [ 543.590579] binder: 15598:15600 ioctl c0306201 200001c0 returned -14 [ 543.619044] binder: 15598:15600 unknown command 0 [ 543.643586] binder: 15598:15600 ioctl c0306201 20008fd0 returned -22 [ 543.651524] binder: BINDER_SET_CONTEXT_MGR already set [ 543.657419] binder: 15598:15621 ioctl c0306201 200001c0 returned -14 [ 543.659466] binder: 15565:15622 ioctl c0306201 0 returned -14 [ 543.665146] binder: 15598:15623 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 543.670596] binder: 15598:15600 ioctl 40046207 0 returned -16 [ 543.677819] binder: undelivered death notification, 0000000000000000 08:39:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="c70a5637099eb7b0b833cb10cdd5041dc66a7d0f94e9ff4b33d60237b48bfa60c271331828f09085aae40c482072ce5c3713a049bf714472bb59b99aeeea20d2188ecf4289b6d5f760c9599532e4a0f305c6b6604aa90e574450a50c80468e9342b4a2c2e34fc6c98203695051e43225ba994eaee2a8cc01cf7bbe5cca8accfd5f75fd747732629f63196fe2b9b70ad7f17837d9af34b8ebdfa2a44e0f30b2e42ffdaa1b773346858db06d560e23550b6993cab0833abb1b6989b684438c679f379fb6a01bcb9ba374d7", 0xca}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) 08:39:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_tcp_int(r3, 0x6, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000640)=""/156, 0x9c, 0x10000, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file1\x00', 0x0, 0x10}, 0x10) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000380)=r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000600)) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000040)) [ 543.688588] binder: 15565:15622 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 543.691702] binder: 15598:15623 unknown command 0 [ 543.709123] binder: 15598:15623 ioctl c0306201 20008fd0 returned -22 [ 543.784783] binder: 15637:15639 ioctl c0306201 0 returned -14 [ 543.791187] binder: 15637:15639 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:37 executing program 3: 08:39:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x50) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x5) 08:39:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\x84\xe0\xda\x82a\xbe\x18O\x17\x1b\\\x143\x06v\x9b=>\xc1\xd9\x06\x00\x05\xf7\xae\xce\xbeA,j5\xac\xf5\xf0&\xc5$\x951QC\x87\x9f\xe0};\xac\xb7k>0\xce\xcd~\xd766*\fo=Cg&[\x8b\xe2\xbd\xe9\x16\xc6\x1e\x97e]\xb0\xed\xe7I\x18\x96RS\x10\x8cyr\xb7\xcf', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r0, 0x0) socket$inet6(0xa, 0x0, 0x0) 08:39:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) syz_open_pts(r2, 0x880) 08:39:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x100, 0x2084, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000140)='r', 0x0}, 0x18) 08:39:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:37 executing program 3: 08:39:37 executing program 5: 08:39:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:37 executing program 3: 08:39:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000012634840040000000000000000000000000000000000000010000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="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"], @ANYBLOB="0200000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x0, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x110) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 08:39:37 executing program 5: 08:39:37 executing program 3: 08:39:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 544.552554] binder: BINDER_SET_CONTEXT_MGR already set [ 544.560442] binder: 15666:15670 ioctl 40046207 0 returned -16 [ 544.591686] binder: 15666:15670 got reply transaction with no transaction stack [ 544.618268] binder: 15666:15670 transaction failed 29201/-71, size 0-24 line 2920 [ 544.646948] binder: 15666:15681 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 544.675329] binder: 15678:15686 ioctl c0306201 0 returned -14 [ 544.686216] binder: undelivered TRANSACTION_ERROR: 29201 [ 544.693723] binder: BINDER_SET_CONTEXT_MGR already set [ 544.706205] binder: 15666:15670 ioctl 40046207 0 returned -16 [ 544.706228] binder: 15666:15681 got reply transaction with no transaction stack [ 544.716016] binder: 15678:15686 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 544.720240] binder: 15666:15688 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 544.732565] binder: 15666:15681 transaction failed 29201/-71, size 0-24 line 2920 [ 544.742932] binder: undelivered TRANSACTION_ERROR: 29201 08:39:37 executing program 4: 08:39:37 executing program 5: 08:39:37 executing program 3: 08:39:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8000, 0x0) accept$packet(r3, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e80)=0x14) bind$packet(r0, &(0x7f0000000ec0)={0x11, 0x1f, r5, 0x1, 0x1ff, 0x6, @dev={[], 0x1e}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:37 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x5) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000280)=0xd5) 08:39:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:37 executing program 3: 08:39:37 executing program 5: 08:39:37 executing program 4: 08:39:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0x9, &(0x7f0000000080)='vboxnet0\x00', 0xffffffffffffffff}, 0x30) getpgid(r2) r3 = syz_open_pts(r1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x8c00, 0x0) r4 = dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x2, 0x8, 0x400, 0xa, 0x30, 0x1, 0x5, 0x8001, 0xfffffffffffff1f1, 0x5, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:37 executing program 4: 08:39:37 executing program 3: [ 544.984790] binder: BINDER_SET_CONTEXT_MGR already set [ 544.993435] binder: 15697:15702 ioctl 40046207 0 returned -16 08:39:37 executing program 1: sync() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x40, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000080)=""/95, &(0x7f0000000100)=0x5f) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x3, 0x0, 0x0, 0x0, 0x4}) r2 = syz_open_pts(r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100402}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x118, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x288f, @dev={0xfe, 0x80, [], 0xa}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @remote, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100000001, @remote, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffff3b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa9d5}]}]}, 0x118}}, 0xee4ec9d37b8c9bbc) dup3(r2, r0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:37 executing program 5: [ 545.044641] binder: BINDER_SET_CONTEXT_MGR already set 08:39:37 executing program 4: 08:39:37 executing program 5: 08:39:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 545.076442] binder: 15697:15716 ioctl 40046207 0 returned -16 [ 545.090922] binder: undelivered death notification, 0000000000000000 [ 545.115927] binder: undelivered death notification, 0000000000000000 [ 545.168241] binder: BINDER_SET_CONTEXT_MGR already set [ 545.177631] binder: 15729:15732 ioctl 40046207 0 returned -16 [ 545.185120] binder: undelivered death notification, 0000000000000000 [ 545.195049] binder: 15731:15735 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 545.202143] binder: BINDER_SET_CONTEXT_MGR already set [ 545.207433] binder: 15729:15732 ioctl 40046207 0 returned -16 08:39:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:37 executing program 3: 08:39:37 executing program 4: 08:39:37 executing program 5: 08:39:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) flock(r0, 0x9) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @rand_addr=0x3}, {0x2, 0x4e21, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, &(0x7f0000000000)='rose0\x00', 0x0, 0x56bd, 0x40}) [ 545.214671] binder: undelivered death notification, 0000000000000000 08:39:38 executing program 5: 08:39:38 executing program 3: 08:39:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setpriority(0x1, 0x0, 0x0) 08:39:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x64}]}, 0x0, 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, [], 0x0, 0xfffffffffffffffc}, 0x48) 08:39:38 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x11000, 0x0) [ 545.278792] binder: BINDER_SET_CONTEXT_MGR already set [ 545.294836] binder: 15745:15747 ioctl 40046207 0 returned -16 08:39:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) [ 545.321988] binder: undelivered death notification, 0000000000000000 [ 545.357089] binder: BINDER_SET_CONTEXT_MGR already set [ 545.367197] binder: 15745:15768 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 545.374440] binder: 15745:15747 ioctl 40046207 0 returned -16 08:39:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:38 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000440)='security.capability\x00', 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000880)='./file0/f.le.\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300002, 0x29, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000740)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x4, 0x0, &(0x7f0000000540), 0x200040, &(0x7f00000005c0)={[{@fat=@quiet='quiet'}, {@dots='dots'}, {@dots='dots'}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x66, 0x31, 0x34, 0x77, 0x7d, 0x34], 0x2d, [0x61, 0x38, 0x64, 0x31], 0x2d, [0x65, 0x7d, 0x77, 0x31], 0x2d, [0x7d, 0x7f, 0x62, 0x64], 0x2d, [0x77, 0x31, 0x0, 0x34, 0x35, 0x73, 0x0, 0x63]}}}, {@measure='measure'}]}) mkdirat(r1, &(0x7f0000000580)='.//ile0\x00', 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f0000000140)='./file0/../file0\x00') 08:39:38 executing program 3: mkdir(0x0, 0x0) creat(0x0, 0x0) getpgrp(0xffffffffffffffff) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:39:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000012634840040000000000000000000000000000000000000010000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="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"], @ANYBLOB="0200000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x0, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x110) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 08:39:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) sched_yield() ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1ff, 0x64b59b5b, 0x0, 0x101, 0x7, 0x0, 0x6, 0x0, 0x4, 0x7fff, 0x8, 0x5}) 08:39:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 545.429189] binder: 15775:15776 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000012634840040000000000000000000000000000000000000010000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="480000000000000000000000000000000000000000000000456e3f3393a9f90693283f40ec57cb97b6afaaa71aed9f995a935618b3748bb52de214860bd9c8d7f0c894d2c120c5af1e821743f7d7ff0061fec650b683aa9797777a1966c2b05cacdfab2abef24037046031d9da105b974df802c440af04ae060cd0614e88f386052eefa7a0bd0852c6b685fe509c73944ae71ab52dfd327757044b39c2aee09e3c52d260ed8759a659d8516bbf92a26b6914fe748fd65e6267e15bbed2719b3daa1f152214aca22430d08079281c52f557e797f860295fff1de6918f51d1b442f5f2e47e36ff3e1136710a0356a2b3db40bfb303cb83b7ba5adcaa98350b707d388184581064f24e4eb55f3d279ecd80f647f1631dc9fae8a357359d361caf88191d85b57d38c7221d43cd4f2c307412d0be4268be414d69f037746c1497b8759916d33d5b2445ede76b6321c4330844"], @ANYBLOB="0200000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x0, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x110) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 08:39:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd824}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) shutdown(r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000012634840040000000000000000000000000000000000000010000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="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"], @ANYBLOB="0200000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x0, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x110) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 545.479989] binder: BINDER_SET_CONTEXT_MGR already set [ 545.495383] binder: 15784:15788 ioctl 40046207 0 returned -16 08:39:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) syncfs(r0) r4 = dup2(r2, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000002c0)=@fragment, 0x8) ptrace$setopts(0x4206, r5, 0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000100)={@dev, @empty, 0x0}, &(0x7f0000000200)=0xc) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @remote}, 0x10) tkill(r5, 0x3b) fcntl$setstatus(r4, 0x4, 0x42803) ioctl$sock_ifreq(r1, 0x8938, &(0x7f00000000c0)={'veth0\x00', @ifru_data=&(0x7f0000000000)="901301b62fd97b95d79e692aeb6d9f48e48d1b96e2fc2140329efc2317c88bbe"}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000180)={{0x2b, @multicast1, 0x4e22, 0x4, 'fo\x00', 0x10, 0x7fff, 0x4a}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4e22, 0x1, 0x1, 0x7, 0xfff}}, 0x44) 08:39:38 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="1529ed3006139edded144af94d14134dff87b65da6cd") r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/u@\xd9\xe4B') setns(r1, 0x0) r2 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000100)="53c8e28a2eba71036309686b63810020a6adc7e08cadf8158b4a551913b2d5978b3dca3261effe774909b03a1fab3a48b1345a888c9eb346442d853653b3b564acb9ad3eb20759f39f05666cbdf68c7e35c40c759d315d3fbd2ec2a9591708c5cb99b064602620b2f2f07ef68b0ac0a4cde8356b3ab076795f51de840c319a187c00c440a275f8d37fca553549089a796544ea1e41b58e80a463efea47f21c3ac1ffc8e4393f33a8bfd174c0ff7daebe50a4622af24b526ead", 0xb9, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r2, 0x7f, 0x1}, &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'sha3-384-ce\x00'}}, &(0x7f0000000280)="41c4f50bc1eb5dac7d5ed1b36786713ef3673b2953187fd71be6f0451bc3ecf8e1ba0cee87aa34eef8a11ec7faf5740a00f44f8926e17ef2009ceb382f4652ad57f6c817be367f0167e83eb66a545e054260bf0b144e54e043c4ed09f4b0eaec03030de066e34b6975a9e1d9bd44ebd74453bd4ceeb77bd01517f14926c64e5e03118a5081b9021b204faf31ce126a2781fabb6385fc9c01067555555879a24c8a6d9588dfe5fa510532", &(0x7f0000000340)=""/108) [ 545.533408] binder: 15784:15797 ioctl 40042409 1 returned -22 [ 545.549041] binder: BINDER_SET_CONTEXT_MGR already set [ 545.562832] binder: 15784:15788 ioctl 40046207 0 returned -16 [ 545.572358] binder: undelivered death notification, 0000000000000000 08:39:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000080)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0xffffffffffffffe0}, 0xf) [ 545.589818] binder: undelivered death notification, 0000000000000000 08:39:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) prctl$PR_GET_SECCOMP(0x15) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 545.892415] binder: 15820:15821 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 545.943609] binder: BINDER_SET_CONTEXT_MGR already set [ 545.954600] binder: 15823:15825 ioctl 40046207 0 returned -16 [ 545.966088] binder: undelivered death notification, 0000000000000000 [ 545.978427] binder: BINDER_SET_CONTEXT_MGR already set [ 545.984059] binder: 15823:15825 ioctl 40046207 0 returned -16 [ 545.990968] binder: undelivered death notification, 0000000000000000 [ 546.024420] binder: 15827:15829 BC_CLEAR_DEATH_NOTIFICATION death notification not active 08:39:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r0, 0x0, 0x1) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000100"]) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 08:39:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) connect(r0, &(0x7f0000000140)=@ipx={0x4, 0x3, 0x8, "8080851b38d6", 0x2}, 0x80) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/11, 0xb) 08:39:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) ioctl$TCSBRK(r0, 0x5409, 0x4a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r2, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e20, @multicast1}}) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1000}) 08:39:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f630c4000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x3b71, 0x9, 0xe388, 0x1, 0x0, 0x0, 0xa32, 0x9, 0x1, 0x5c0d, 0x8, 0x23, 0x1f, 0x40, 0x6, 0x8, 0x3, 0x101, 0x2, 0xffc0000000000000, 0x3f, 0x100000001, 0x7, 0x100000001, 0x5, 0xfffffffffffff801, 0x4, 0x27, 0x100000001, 0x7f, 0x8, 0x7, 0x40, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x209b0, 0x93, 0x3ff, 0xf, 0x8, 0xfffffffffffffff9, 0x7}, r3, 0x3, 0xffffffffffffff9c, 0x0) 08:39:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:39 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x800) 08:39:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000001600)=""/253) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1468, 0x36, 0xfffffffffffffffd, 0x0, 0x0, {0x10000000002}, [@typed={0x14, 0x94, @binary="ccc91eac985c6da1f470124f8d36bf"}, @nested={0x1438, 0x16, [@generic="d651d9fbd37afefad7c4328d88011889325a50d5557e903336f2df59aa3d1f40cfadac52d67dda3d2dba4fc2ba020f34b74be4a03eca43d856eacb3c0df4f639afae8bf62ce3620fabd2e43eab643323cf8209f9db0d36c9a93980d9c91f54efdf04a2bf78dd32a0c64add2593484379a4a9f2daee09a2b2af098a20f2ed68085ccf830f70c78fc0283199ed7422b7714d6fea82b60eb47f4e94c084335c18213b98ff93e506a708f3db1c5bf559df762e6d5d5efa91e7f7cccd9d0c7d36361401ec6d49066b7a64e89e", @generic="d0fea6b80a7c82384e2c7366de9b3c2af5641f93eccadc365ef2de65e18dabaef3d75954a36c2cecc6965b49adbef6e5e66f9a398d34855f51c62d61558dd8cb84e8956cc30603c79e1b22e8dccc37e84de4bda1b8ad71e44df2847aa6c621e3d257195f5fb4d96012aca1a425e7cf534408f9eb3d0b3ddf39f805b6fb809ee818f3f66f3997cc5600879904aaf06fd56809513641ecdcbf2594cb5ee23cde000df1ed2514cfe9196e0885a6c7e14756683f4cd4ea7ba598b284271b0c800588eba6e791bf545bbeb822ca1f8cf34bad1240312ef8d85d7b900fd450a65e4005c0f1c4f60fe10451b1d91330d4db0e2990ad43786ae90ee223a0", @generic="31d6ae80fd5a722268ef2483a9b3e95d8db4913f1adca12ae92cf339804e75f22c9844b7c34c2553532315ecd6294fc8d895ea7fa7cbc177c31b967fb58e2bc175aabafb9d", @generic="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", @generic="842b1181c7b11b485c71b8c76ac993c796de90d6ff9eb73fb76cf22fc34f945048ea3a831e5eb6ebf7dffdfe76e17f5295963949516ad8660aa69d180dc155c1effa", @typed={0x4c, 0x21, @binary="8ca6f254dad753b872c7483a0663f1b0a043ade9a09a621503482d0d93b00a80143124ff2181339d0b716afd48546410273c18eae219cea0459de28821ed782e362230c3167b"}, @typed={0x8, 0x1f, @uid=r2}, @typed={0x100, 0x41, @binary="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"}, @generic="e44a5d463d6cbb1389d72f03eccc04a5b9c0dc2dcea844c71f373bcae4af531c72232ecbb18b5737866a1a446bbbd782fb12cc22cf7ee041d0899ff55cef4666f990549818ef2dc9f7123b4c3371ee7a173b1138e4f246a4e384e6d4673d2e1a9ba468918f75fa7e53d4d59e6ec3a05fd8037e75484e9723ccf7020b4d7ad1d28be22f4c1e0f3999bb8fe27786a12554f22b553dd5"]}, @typed={0x8, 0x3f, @str='$\x00'}]}, 0x1468}}, 0x0) [ 546.285303] binder: BINDER_SET_CONTEXT_MGR already set [ 546.294799] binder: 15835:15839 ioctl 40046207 0 returned -16 [ 546.302350] binder: 15835:15839 unknown command 1074553631 [ 546.308804] binder: 15835:15839 ioctl c0306201 20008fd0 returned -22 [ 546.317201] binder: BINDER_SET_CONTEXT_MGR already set [ 546.342267] binder: 15835:15839 ioctl 40046207 0 returned -16 [ 546.342961] binder: 15835:15849 unknown command 1074553631 [ 546.373395] binder: 15856:15857 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 546.374238] binder: 15835:15849 ioctl c0306201 20008fd0 returned -22 08:39:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup3(r0, r0, 0x80000) creat(&(0x7f0000000000)='./file0\x00', 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xba) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4884) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sync() 08:39:41 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x209, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000140)={0x9, 0x8, 0x513f2f72}) r5 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r5, 0x0, 0x1, &(0x7f00000002c0)='\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xe8) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x250) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400), 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0xfffffe54) r6 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r6, &(0x7f00000004c0)="a73aefa24ae2", 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff87, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) fsetxattr(r1, &(0x7f00000001c0)=@known='system.sockprotoname\x00', &(0x7f0000000280)='vboxnet1\'em0eth0-losystemsecurity\x00', 0x22, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x23a}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getpeername$inet(r5, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000380)=0x10) 08:39:41 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000240)='GPL\x00', 0x2, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f0000000040)}, 0x10) 08:39:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40440, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000100)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0x8a9) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0008000000000000000000000000000000000000000000000000000000000004000400000340000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x498, 0x140, 0x280, 0x0, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000340), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x8, 0x4538, 0x8, 0x77, 0x101, 0x7fffffff, 'rose0\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x1d2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}}}, {{@arp={@remote, @local, 0xffffffff, 0xffffffff, @mac=@local, {[0x0, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}, 0xf2b, 0x5c9, 0x6bc5, 0x4, 0x6, 0x100000000, 'veth0_to_bridge\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x2}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7f, 0x8, 0x8001}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) r2 = open(&(0x7f0000000180)='./file0\x00', 0x371a00, 0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000008c0)={0x1, 0x1, {0x29, 0x29, 0x11, 0x10, 0x0, 0x7fffffff, 0x2, 0x64, 0xffffffffffffffff}}) inotify_add_watch(r1, &(0x7f0000000880)='./file0\x00', 0x40000000) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000002c}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d3e98260ed756cc1c903ccd1b87391b67dee0d09f8b6d73cc794a222db75efa99f9d22884ce7efaf479f713264ae99b5a94c0519dd1190dbf60b37702f977b12c462cf2f7029c3c5e49395d757ac7ad69a5f86cf33d30ce2a1ecca792c25c908ebc46206786c5b881d9d8dd3def348c7f1809d3ace3693cd7331d60a3de80522694dbf567477a85cb3ef7c318142ae30daa531935fdae85907a82e73179ea7e7345dc5e06d075c6608269baa004864dcf14f4fd0efd86175f5822ae83f77aaf556806a00000000000000000000000000", @ANYRES16=r3, @ANYBLOB="000025bd7000fddbdf25090000000800050008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) 08:39:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 548.587554] binder: BINDER_SET_CONTEXT_MGR already set [ 548.599634] binder: 15865:15867 ioctl 40046207 0 returned -16 [ 548.618425] binder: undelivered death notification, 0000000000000000 [ 548.628399] binder: BINDER_SET_CONTEXT_MGR already set 08:39:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 08:39:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x7, 0x100000001, 0x8000000001}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x20820000, r0}, 0x2c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x202, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) 08:39:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630040000000000e630c4000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x4, 0x4) close(r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) bind$inet(r0, &(0x7f0000000000), 0x10) [ 548.643815] binder: 15865:15867 ioctl 40046207 0 returned -16 [ 548.667963] binder: undelivered death notification, 0000000000000000 08:39:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) pipe2(&(0x7f0000000040), 0x84800) sendto$inet(r0, &(0x7f0000000000)="dde20f100fc1c79a93edf7e95ad2a3ceb954bf7b28df4f7b25", 0x19, 0x0, 0x0, 0x0) 08:39:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000340)={0x38}) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ipmi_device_t:s0\x00', 0x23, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xffffff35) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) [ 548.751023] binder: BINDER_SET_CONTEXT_MGR already set [ 548.769949] binder: 15893:15897 ioctl 40046207 0 returned -16 08:39:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x3, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr, 0x3}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x3de, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0180c200000000001700000008004500005a0000000000009078ac14140de0000001000000000401907800d7050200f53475"], 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x1, @mcast2, 0xffffffffffffffbb}, {0xa, 0x4e21, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xc}, 0x1000}, 0x7, [0xfffffffffffffff9, 0x824d, 0x1, 0xc7, 0x8, 0x2, 0x5, 0x8]}, 0x5c) add_key(&(0x7f0000000140)='id_legacO\x05', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="8e065c10a57b82c350d949ea8cf782bcc24ca6a099b8a8a4d031f58a4d65e883935b8ae9b3f65ef5bdfc548004b029f1000642a19c46924ec12e84c1eaf2509b181b577ba0af0ef6647fc0e35e4da54d49f64bde120d45527095cb973ac0c0dc0b2b3cdda4d52d8e20558670fbbf2f2430208b1fc9e5313960ab6f88f8911d475c887754a6d416ff81b78b2a030d1c354c8c5bba687b06ea1222d32e6a2e15db39faa01cd77ab349440da5ef14b318d6e1964d189f041390d191fb2a46b7045c2b6ccc447b425fdfdb6c6187c74071f78394d2a8777f54a1b444f0011e771d1577167d4e777c3b4e16e3bd1ca397d56d79e6e1f6a42cca0c64", 0xf9, 0xfffffffffffffffc) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000500)={'\x00', 0x3f}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000580)=0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000003c0)=0x8be, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x4) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x4, 0x6, 0x0, 0x200000000, 0x0, 0xfff, 0x100, 0x8, 0x2, 0xec9c, 0x7f, 0x8, 0x1, 0x6, 0x2, 0x8, 0x5, 0x40, 0x1, 0x3f800000000000, 0x0, 0x0, 0x3, 0x7, 0x9, 0x9, 0x3e, 0x3, 0x3, 0x100000001, 0x8, 0x3ff, 0x1, 0x0, 0x860, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x5, 0xdb4a33}, 0x1000, 0x2, 0x8, 0x4, 0x5, 0x6, 0xee}, r4, 0x5, r3, 0x9) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, 0x0, 0x1000001fa) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, 0x0) setns(0xffffffffffffffff, 0x0) clone(0x70024100, &(0x7f00000001c0), 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7f) r6 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)="10ec", 0x2, r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000680)) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0xa, 0x0, 0xc, 0x2}, 0x10}}, 0x0) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000340)=0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) 08:39:41 executing program 4: r0 = eventfd(0x0) r1 = inotify_init1(0xfffffffffffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r2, &(0x7f00000000c0), 0x8) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) close(r2) dup(r4) splice(r2, 0x0, r3, 0x0, 0x200, 0x0) r5 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80000) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) accept$inet(r5, 0x0, &(0x7f0000000080)) dup2(r1, r0) 08:39:41 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000001c0)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1f) nanosleep(&(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1014c5, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000180)=0x8001) [ 548.795763] binder: 15893:15897 unknown command 1073767173 [ 548.807267] binder: 15893:15897 ioctl c0306201 20000000 returned -22 [ 548.833657] binder: 15893:15897 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 548.847494] proc: unrecognized mount option "¨6Š›ø]Åcše!­?šteéòcÎZ%š" or missing value [ 548.856208] binder: BINDER_SET_CONTEXT_MGR already set [ 548.862543] binder: 15893:15917 unknown command 1073767173 [ 548.873558] binder: 15893:15897 ioctl 40046207 0 returned -16 [ 548.882112] binder: 15893:15918 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 548.889269] proc: unrecognized mount option "¨6Š›ø]Åcše!­?šteéòcÎZ%š" or missing value 08:39:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) tee(r1, r1, 0x7fffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c4000100080"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000100)={0xb1a04a9df8896a2b, 0x3}) [ 548.900355] binder: 15893:15917 ioctl c0306201 20000000 returned -22 [ 548.913715] binder: 15927:15928 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 548.940381] binder: BINDER_SET_CONTEXT_MGR already set 08:39:41 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = dup(r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000400)=0x220, 0xfffffffffffffd8f) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x4, @mcast1, 0x101}}, 0x0, 0x8, 0x0, "9fc72b543b28dd4728c3988b7adea76fa59f716c731782304d2a8b2baf8c1724fb01b86d7c1d88f3c7322926d8f0fcdb51b5df3ba8b696320eb85ae1bd8e6af048c54f27e0dad819d7cb50aaa2bc300f"}, 0xd8) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x7, 0x4) setns(r3, 0x8000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRESDEC=r3, @ANYRESOCT=r3], 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r4) clock_nanosleep(0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @broadcast}, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x413, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r6, &(0x7f0000000300)=""/135, 0x87) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r7 = getpgid(0xffffffffffffffff) getpgid(r7) socket(0x2, 0x3, 0x100000001) 08:39:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:41 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/3, &(0x7f0000000240)=0xffffffffffffff16) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bind$inet(r0, &(0x7f00000009c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="726177000000e8ebb38cef5920022d409b60b91eee0000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0xa) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x202000, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1000000) keyctl$join(0x1, &(0x7f00000001c0)={'syz'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) [ 548.947272] binder: 15931:15933 ioctl 40046207 0 returned -16 [ 548.981733] binder: 15931:15933 unknown command 1074528256 [ 548.989255] binder: 15931:15933 ioctl c0306201 20008fd0 returned -22 08:39:41 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sched_getscheduler(r0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x88000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/128, 0x80, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x10, &(0x7f0000000300)={&(0x7f0000000100)=""/219, 0xdb, r4}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_DESTROY(r3, &(0x7f00000003c0), 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000400)={'veth0_to_hsr\x00', {0x2, 0x4e22, @multicast1}}) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, r5, {0xd, 0xffff}, {0xf, 0x4}, {0xd, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb930}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad27}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x814) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x2000, 0x0) r8 = memfd_create(&(0x7f00000008c0)='\x00', 0x2) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000900)) pipe2$9p(&(0x7f0000000940), 0x0) close(r8) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000980)={0x6, 0x3f}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) write$apparmor_exec(r3, &(0x7f00000009c0)={'exec ', '/selinux/checkreqprot\x00'}, 0x1b) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000a00)={0x40002001}) ioctl$PERF_EVENT_IOC_ID(r8, 0x80082407, &(0x7f0000000a40)) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x140, r6, 0x30, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x282b34c2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7a2}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) write$9p(r7, 0xffffffffffffffff, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000c80)={0x0, 0x4, 0x0, [{0x7, 0x7f, 0x0, 0x9, 0x0, 0x4, 0x4}, {0x2, 0x7, 0x94a8, 0x800, 0x401, 0x8}, {0x7, 0x0, 0x4, 0x6169, 0x2, 0x3, 0x8}, {0x9, 0x9, 0x2b8, 0x1ed1543c, 0x9a89, 0x3, 0x401}]}) setfsuid(r1) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @mcast1, 0x6, 0x2, 0x3ff, 0x100, 0x2, 0x100000, r5}) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000e40)) 08:39:41 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000cc0)=""/108) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)='/selinux/status\x00'}, 0x30) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb96, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0xffffffffffffffff}, r1, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000c00)={&(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/146, 0x92}, {&(0x7f0000000900)=""/17, 0x11}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f0000000a80)=""/25, 0x19}], 0x5, &(0x7f0000000b40)=""/167, 0xa7}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000c40)=0x2, 0x4) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000c80)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r4) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/117, 0x75}, {&(0x7f00000000c0)=""/165, 0xa5}, {&(0x7f0000000180)=""/116, 0x74}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/116, 0x74}, {&(0x7f0000000480)=""/75, 0x4b}], 0x9, &(0x7f00000005c0)=""/198, 0xc6}, 0x40e3f18961ec4f86) futex(&(0x7f0000001000), 0x8c, 0x1, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000780)={r2, 0x0, 0x1, 0x20, 0x701}) socket$inet6_tcp(0xa, 0x1, 0x0) 08:39:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x800, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000100)={0x68, 0x29, 0x1, {0xffffffff, [{{0x4, 0x4, 0x3}, 0x4, 0xffffffff, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x2, 0x1, 0x7, './file0'}, {{0x21, 0x1, 0x2}, 0x3, 0x80000000, 0x7, './file0'}]}}, 0x68) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)={0x200, 0x0, 0x3, 0x7, 0x4, [{0x200, 0x7, 0x1, 0x0, 0x0, 0x2000}, {0x8, 0x8, 0x3}, {0x1, 0x3ff, 0x3, 0x0, 0x0, 0x82}, {0x0, 0x20, 0x94, 0x0, 0x0, 0x400}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 549.024254] binder: BINDER_SET_CONTEXT_MGR already set [ 549.036905] binder: 15931:15933 ioctl 40046207 0 returned -16 [ 549.040921] binder: 15931:15941 unknown command 1074528256 [ 549.048602] binder: 15931:15941 ioctl c0306201 20008fd0 returned -22 08:39:41 executing program 4: socketpair$unix(0x1, 0x8000000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/33, &(0x7f00000000c0)=0x21) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000140)="240000001e0025eaa87865f51ef6bce90a04000200bff20182a9000c080009000b000000", 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x4) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8c0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$binfmt_misc(r0, &(0x7f0000000200)={'syz1', "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"}, 0x1004) [ 549.119001] binder: BINDER_SET_CONTEXT_MGR already set [ 549.132018] binder: 15952:15955 ioctl 40046207 0 returned -16 [ 549.153801] binder: undelivered death notification, 0000000000000000 [ 549.172009] binder: BINDER_SET_CONTEXT_MGR already set [ 549.173942] binder: 15961:15964 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 549.184319] binder: 15952:15955 ioctl 40046207 0 returned -16 [ 549.187576] binder: 15961:15964 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 549.197738] binder: undelivered death notification, 0000000000000000 08:39:42 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 08:39:42 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="68c35401e482056c6a935daefe", 0xd, 0x40080, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4000800100000005) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg(r1, &(0x7f0000000900)={0x0, 0x32e, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x224}, 0x0) 08:39:42 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0xfffffffffffffffc, r2) close(r2) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket$netlink(0x10, 0x3, 0xc) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000280)) sendfile(r2, r4, 0x0, 0x8000fffffffe) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x400000000005) bind$packet(r3, &(0x7f0000000300)={0x11, 0x18, 0x0, 0x1, 0x228, 0x6, @local}, 0x14) write$UHID_CREATE2(r1, &(0x7f0000000080)={0xb, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '?'}, 0x119) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0xac5}], 0x1) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 549.770449] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:39:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f400fb0fa42ca5d384b39b123da9ad7376c56d86c6e6cad21033b201e7335ac8b0ef600cf6946818db80aef5cb720c15b55afaba2484207307e6875df81a63a512499694916d5bc0dd88e1784042650b962e74cafb898149975ad9e2c25d23b31c60eeaf1bddd9e39e2c75f0849b393c447628d023a3ac78e74db5fd449349eb19794a528d8aabba72cf5c141fbf10c22adc270f1c142a035175e8a5862f7ce4b382f6d523c1f3a0aa9a56e52aea516d0aa54517991e0b669329a43178"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0500000e630c40000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000040)) 08:39:44 executing program 5: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000100)={'system_u:object_r:udev_tbl_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x20}, 0x53) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x8000000e}) fgetxattr(r0, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)=""/30, 0x1e) 08:39:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x80000001, @ipv4={[], [], @multicast2}, 0x8}, {0xa, 0x4e21, 0x100000001, @rand_addr="1d1c2225f42e66c22dcf0666b0430a75", 0x200}, 0x0, [0x9, 0xfffffffffffffffa, 0x2, 0x1e, 0x1, 0x3, 0xfffffffffffffffb, 0x2]}, 0x5c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) io_setup(0xff, &(0x7f0000000000)=0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) io_cancel(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffff4b, r2, &(0x7f0000000100)="b98569fedd84310ce90d56c9c57276d1fec8da3649d0a0a3789b7e90c23131c90133a3672ab9617146b568a3a6030bfddfe68bff893666d6952e003a21f9b78484a8e2c38f138eea27bcb7bf56e48ed6f13224ba5aba503dc3e6d245a6304627b7a9ea0a99b6005ea588ca61f2f2fdb1bb49e0a20028f97939fe677dbb83ca9e3d4ad56890e1", 0x86, 0x2, 0x0, 0x2, r4}, &(0x7f00000001c0)) sendto$inet(r2, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) 08:39:44 executing program 4: mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x6004, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_gettime(r0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') socket$inet6(0xa, 0x3, 0x40003) ptrace$pokeuser(0x6, 0x0, 0xa, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x94) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) r2 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) 08:39:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0xff}) ptrace$cont(0x18, r0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/93) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) 08:39:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1c000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') read(0xffffffffffffffff, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) ioctl$TCSBRK(r2, 0x5409, 0x5651) [ 551.856995] binder: BINDER_SET_CONTEXT_MGR already set [ 551.866618] binder: 15984:15989 ioctl 40046207 0 returned -16 [ 551.880920] binder: 15984:15989 unknown command 268108020 [ 551.891776] binder: 15984:15989 ioctl c0306201 200001c0 returned -22 08:39:44 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$TIOCSBRK(r0, 0x5427) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'hsr0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) [ 551.912713] binder: 15984:15989 unknown command 234881029 [ 551.922814] binder: 15984:15989 ioctl c0306201 20000000 returned -22 [ 551.924218] binder: 16008:16009 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 551.933321] binder: 15984:15989 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:44 executing program 5: r0 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@buf) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)='syz_tun\x00'}, 0x30) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f00000001c0)={@initdev, @dev}, &(0x7f0000000200)=0xc) ptrace$cont(0x1f, r3, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000140)="0204020003006000ebbed7f85c3b666e44b948835500000000ff00002000000007d9fbcf80398d537500000600791f301ee616d501000000000000d653c0e3850500000000000000", 0x48, 0x4044, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) 08:39:44 executing program 4: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_emit_ethernet(0x437, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) [ 551.958876] binder: BINDER_SET_CONTEXT_MGR already set [ 551.964937] binder: 15984:16012 unknown command 268108020 [ 551.975441] binder: 15984:15989 ioctl 40046207 0 returned -16 [ 551.986043] binder: 15984:16012 ioctl c0306201 200001c0 returned -22 [ 551.994532] binder: 16008:16015 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 552.002381] binder: 15984:15989 unknown command 234881029 08:39:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r3, 0x408, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffff8b07}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x45}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x804) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 552.008784] binder: 15984:16012 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 552.016775] binder: 15984:15989 ioctl c0306201 20000000 returned -22 08:39:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000000000001ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 08:39:44 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000000)) 08:39:44 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) getegid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x30, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$cgroup_subtree(r0, &(0x7f00000005c0)={[{0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2f, 'rdma'}, {0xd27441b3daec2d0b, 'pids'}, {0x2d, 'cpu'}, {0x2d, 'io'}, {0x2d, 'cpu'}]}, 0x26) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x900, 0x101, &(0x7f0000000240)) chroot(&(0x7f0000000200)='./file0\x00') [ 552.074179] binder: BINDER_SET_CONTEXT_MGR already set [ 552.079932] binder: 16022:16025 ioctl 40046207 0 returned -16 [ 552.087100] binder: undelivered death notification, 0000000000000000 [ 552.140514] binder: BINDER_SET_CONTEXT_MGR already set [ 552.146061] binder: 16022:16033 ioctl 40046207 0 returned -16 [ 552.155083] binder: undelivered death notification, 0000000000000000 [ 552.168947] binder: 16030:16041 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 552.196274] binder: 16030:16041 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x80000001, @ipv4={[], [], @multicast2}, 0x8}, {0xa, 0x4e21, 0x100000001, @rand_addr="1d1c2225f42e66c22dcf0666b0430a75", 0x200}, 0x0, [0x9, 0xfffffffffffffffa, 0x2, 0x1e, 0x1, 0x3, 0xfffffffffffffffb, 0x2]}, 0x5c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) io_setup(0xff, &(0x7f0000000000)=0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) io_cancel(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffff4b, r2, &(0x7f0000000100)="b98569fedd84310ce90d56c9c57276d1fec8da3649d0a0a3789b7e90c23131c90133a3672ab9617146b568a3a6030bfddfe68bff893666d6952e003a21f9b78484a8e2c38f138eea27bcb7bf56e48ed6f13224ba5aba503dc3e6d245a6304627b7a9ea0a99b6005ea588ca61f2f2fdb1bb49e0a20028f97939fe677dbb83ca9e3d4ad56890e1", 0x86, 0x2, 0x0, 0x2, r4}, &(0x7f00000001c0)) sendto$inet(r2, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) 08:39:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x40000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, r2, 0x8, 0x100060) r3 = gettid() setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0xfff}]}, 0x10) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) fcntl$setstatus(r0, 0x4, 0x42803) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x2, 0x4) alarm(0x816b) 08:39:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x101000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 08:39:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_FP_MODE(0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) fsetxattr$security_capability(r0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x80000000, 0xfffffffffffffff7}]}, 0xc, 0x1) ioctl$sock_netdev_private(r2, 0x89f7, &(0x7f0000000100)="f7cb0aa7f3c5ceaac6c4a9d71a5611c6519b80701b2b90e2829f063f5947016e48e1a603ba378340064045b11affdad1ad72ac71b22ea1434d9247ca1971f9238f2553f2f6a58c1b92a64d8b12132d43623e9498dcdab5ef8263cd879779e19678892fd58b055beffc7a8b496becb5ffcc9248e4976aff22fd9748cdf76297a01172cabc427dd94883aaf72c633af886d8b085de044e49647d8e7f061281e75eaf481a196e73de17025568592cd4d8663b9c") fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000001c0)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000414900000004fcff", 0x58}], 0x1) 08:39:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000000100)=""/202, 0xffffff8a) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000d00)="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", 0x1000, r1) [ 552.773338] audit: type=1400 audit(1550997585.516:124): avc: denied { create } for pid=16056 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 552.781761] binder: BINDER_SET_CONTEXT_MGR already set [ 552.803282] binder: 16055:16059 ioctl 40046207 0 returned -16 [ 552.812559] binder: undelivered death notification, 0000000000000000 08:39:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x88010, r1, 0x0) [ 552.840798] binder: BINDER_SET_CONTEXT_MGR already set [ 552.846148] binder: 16055:16059 ioctl 40046207 0 returned -16 [ 552.861727] binder: undelivered death notification, 0000000000000000 08:39:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:45 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) sendto$packet(r2, &(0x7f0000000a80)="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", 0xa00, 0x4004000, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x202}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x1) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x200327da) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x80, 0x1, 0x4, 0x3}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) [ 552.901799] binder: BINDER_SET_CONTEXT_MGR already set [ 552.916416] binder: 16072:16075 ioctl 40046207 0 returned -16 [ 552.941591] binder: undelivered death notification, 0000000000000000 08:39:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x800, 0x0) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000002c0)) r4 = openat$keychord(0xffffffffffffff9c, 0x0, 0x80200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000300)=[@mss={0x2, 0x6}, @window={0x3, 0x10000}, @mss={0x2, 0x7fffffff}], 0x3) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)=0x2) gettid() write$P9_RSYMLINK(r4, &(0x7f0000000240)={0x14, 0x11, 0x2, {0x80, 0x1, 0x4}}, 0x14) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000540)={'bond_slave_1\x00', {0x2, 0x4e24, @multicast2}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) getuid() arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000340)={&(0x7f00000005c0)="c401792b780041dd33cfc4e16e5285e800000066450f380209c48195558ac77d6094c461265aeff04481060000002199c40211af19", {0xfe8}, 0x0, 0x0}, &(0x7f0000000440)={&(0x7f0000000600)="8f6950014e1f36420f54dbc4a20dbfdb8f6978c11b8f885885cdf9c481ac5cc93e0ffd8bff2f027bf30f7ffcc441e55d1ac4217c118075980000", {}, 0x0, &(0x7f0000000980)="f243afc4c3d122641f1213660fe47cfd0041700cc44199d440060f9cc00f03720bf3440f2cc0c4237122b5040000000d64410f0f7c81e1a7"}, 0x8, &(0x7f0000000480)) sysinfo(&(0x7f00000007c0)=""/154) write$binfmt_elf64(r5, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0xad, 0x0, 0x1, 0x3, 0x3e, 0x1, 0x211, 0x40, 0x358, 0x6, 0x5, 0x38, 0x2, 0x7, 0xfff, 0x1}, [{0x7, 0x1ff, 0xfffffffffffff001, 0x4, 0x4, 0x87e, 0x9, 0x749}], "22316c534401fcec96c38eceefedc0734e18b695617766d7c927efada81d9a8eecfb87545c4062e0df694ae0996f7988242349765b0247c1016439c0274e4e0fd3062b205ce8ef449fa6f114543f4b6d42004f6d3cc033de9890062763a772c83a731f580edb91f8e26089066c49e73c515bf43ee654879081113886cf686787edd513388a728213c88a9f90c2563d4725d1632ea69575af9d6132feef41b5f78d30c7"}, 0x11b) inotify_add_watch(0xffffffffffffffff, 0x0, 0x3000000) prctl$PR_GET_THP_DISABLE(0x2a) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x7, 0x56e4, 0x9, 0x6, 0x0, 0x6, 0x10000, 0x3, 0x8, 0xffffffff, 0x101, 0x2, 0x1, 0xffffffffffffffff, 0x100, 0x6, 0x1, 0x401, 0x1, 0x8, 0x3, 0x5, 0x400, 0x20, 0xfffffffffffffffa, 0x4040000000000, 0x85b, 0x3, 0x0, 0x2, 0x1, 0x7e49ecc7, 0x80000001, 0xfff, 0x0, 0x0, 0x0, 0x4, 0x6, @perf_config_ext={0x7, 0x5}, 0x4000, 0x8c2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) [ 552.956657] binder: BINDER_SET_CONTEXT_MGR already set [ 552.965905] binder: 16072:16085 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 552.968280] binder: 16072:16075 ioctl 40046207 0 returned -16 08:39:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpgid(0xffffffffffffffff) wait4(r1, &(0x7f0000000080), 0x1000000, &(0x7f00000001c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) pread64(r0, &(0x7f0000000100)=""/180, 0xb4, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) [ 553.064833] binder: BINDER_SET_CONTEXT_MGR already set [ 553.070339] binder: 16090:16092 ioctl 40046207 0 returned -16 [ 553.089556] binder: BINDER_SET_CONTEXT_MGR already set [ 553.097403] binder: 16090:16092 ioctl 40046207 0 returned -16 08:39:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x277, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x200000a, 0x6031, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="55ebc0e7e98f64cc43aab181c7d1cf86200f6500000000000000000844029781c2b37bcac56527af5b2b657bd9d2e052aea0985121d3da4803801b3ba865ac4c00009ccf021fc939bfd3708f0300efcf23dca7ac0647a80bc531c85b94"], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000700)={{0x0, 0x0, 0x6, 0x61baf0e3c535d25b}}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, 0x0) mremap(&(0x7f000052b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) [ 553.110892] binder: undelivered death notification, 0000000000000000 [ 553.130464] binder: undelivered death notification, 0000000000000000 08:39:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/prev\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000600)="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", &(0x7f0000000440)="f591f84b2aac31e46e42cd69b86def7e356b65522ecfb175dd787874ac33a7bed3bbdd2f78ce9aeefb9736c9ccb8d1802f535b91bb5cad6f759952a56fa8cb9e359b9d69639cf2868f15d9183016e7114b7e9091a293477f0409a6b40302401961cd5f0e9f9765078d0988e5e6379ebd403176df26a7c383ab26f38ed7736063043884470ed065974f6325efd4e6ed2864c57c62f94da84ce4a75ebfd4d68e8d4a31efd14a963426f221a87a2fa3f882b6b1ecd49403bc0dcc1c022eb30cb44e3a665642c758db2c7264e4b3e9ba94360c1ed6df2da2b26853697ba7ab272d34c20e53449bf0a75b3c6870a1d50d2f55", 0x3}, 0x20) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x2) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x87) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000300)=@flushpolicy={0x10, 0x1d, 0x501}, 0x10}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x211, 0x0, 0x0, {{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb2, 0x2}}, 0xb8}}, 0x0) 08:39:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="eff97d91acdaa490594d84edea7825f96fb9b2decb7867f74d4eb2e4192cc2485e0017ef8b606dcbe4e649d6c9d15cbdde450b6389bf43eaa0bc5cf32b82eb47f0b06a62e11eda5d32d406c9c2ad7864c463916b8040d91c4f448d6ac8f8b8892b091396d1ad46e8dbd851f84b6826cb2629c28d04546f99c34cc2", 0x7b, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x2) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x1, &(0x7f0000000080)='\xed', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r3, 0x0, 0x19, &(0x7f0000000040)='\x01^user]-%selinuxcpuset]\xe4\x00', r4}, 0x30) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x36}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:39:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0610b9e1c5fadfa9f6d8fee49d82af7ffacb338d1dafef09c85fdd3747d1579a83225d24bd098378facc2618"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0d630c40006116640000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) getpriority(0x3, r2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x400000, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0xb, 0x3, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x5}, [@typed={0x8, 0x47, @ipv4=@loopback}, @typed={0x8, 0x17, @u32=0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 08:39:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}, @FRA_SRC={0x14, 0x2, @remote}]}, 0x44}}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xe77e6605858b2139, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b6300001063084000000000000000000e630c400400000000000000000000000f630c400200000004000000000000000d63000011634840030000000000000004000000000000000000000001000000000000000000000040000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=r2, @ANYBLOB="0400000000000000852a747001000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000002100000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="d1de000000000000066304400400000012634840040000000000000001000000000000000000000001000000000000000000000020000000000000001000000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="8561646600000000080000000000000002000000000000001d00000000000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000001c0)}) prctl$PR_SET_FP_MODE(0x2d, 0x2) 08:39:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000001480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000001500)=0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x1a, 0x1d, 0x1, 0x8, 0xa, 0xfffffffffffffe01, 0x4, 0x5e}) syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) 08:39:46 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xf03, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) [ 553.695509] binder: BINDER_SET_CONTEXT_MGR already set [ 553.708547] binder: 16111:16117 ioctl 40046207 0 returned -16 [ 553.722900] binder: 16111:16117 unknown command -507965434 [ 553.729087] binder: 16111:16117 ioctl c0306201 200001c0 returned -22 [ 553.769928] binder: 16111:16135 unknown command 1074553613 [ 553.780465] binder: 16111:16135 ioctl c0306201 20000000 returned -22 [ 553.791009] binder: 16111:16117 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 553.804604] binder: BINDER_SET_CONTEXT_MGR already set [ 553.804610] binder: 16111:16135 unknown command -507965434 08:39:46 executing program 1: mkdir(0x0, 0x10) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x64c35280, 0x20080) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000400)={0xfff, 0x2, 0xd5d8, 0x9, 0x3, 0x4cb8}) getpid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x1, 0x0) read(r2, &(0x7f0000000280)=""/198, 0xc6) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0x1) r4 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r3, &(0x7f0000000380)="a54832085fffb11554be022df275c3a0f74bdecadb1805f45fa8", &(0x7f0000000480)="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", 0x2}, 0x20) sendmsg$key(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') [ 553.804621] binder: 16111:16135 ioctl c0306201 200001c0 returned -22 [ 553.810718] binder: 16111:16117 ioctl 40046207 0 returned -16 [ 553.825114] binder: 16111:16135 unknown command 1074553613 [ 553.847703] binder: 16111:16143 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 553.860596] binder: 16111:16135 ioctl c0306201 20000000 returned -22 08:39:46 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) chroot(&(0x7f0000000400)='./file0\x00') r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@empty, @loopback, @remote, 0xffffffffffffff7f, 0x7, 0x4, 0x100, 0x2, 0x200000, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000002c0)="5500000018007fafb72d1cb2a4a280930206f00000a80209c02623692500150003000200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef7e69183de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000380)={0x2, 0x7f, 0x40, 0x0, 0x2}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) 08:39:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x18, 0x4, 0x3, 0x9, 0x9}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [{0x2, 0x4, r3}], {0x4, 0x1}, [{0x8, 0x1, r4}, {0x8, 0x4, r5}], {0x10, 0x3}, {0x20, 0x6}}, 0x3c, 0x1) 08:39:46 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x80a00, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000340)) open(&(0x7f0000000380)='./file0\x00', 0x40800, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000007240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(0xffffffffffffff9c, 0x10, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000065c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, 0x0) getresgid(&(0x7f0000006880), 0x0, &(0x7f0000006900)) bpf$PROG_LOAD(0x5, &(0x7f0000006a00)={0x6, 0x0, 0x0, &(0x7f00000069c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xb}, 0x48) openat$ashmem(0xffffffffffffff9c, &(0x7f0000006ac0)='/dev/ashmem\x00', 0x4400, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000006b00)='/dev/rtc0\x00', 0x200000, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000006b40)='/selinux/create\x00', 0x2, 0x0) getpgid(0xffffffffffffffff) lstat(&(0x7f0000006c00)='./file0\x00', &(0x7f0000006c40)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006cc0), &(0x7f0000006d00)=0xc) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006d40)={{{@in=@remote, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000006e40)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000007040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000071c0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000066c0)=[{&(0x7f0000006600)=ANY=[@ANYBLOB="100000000000000028bd700000d2e300"], 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x20040094) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x12b742, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:39:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x400}, 0x8) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f9d000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) restart_syscall() sendmsg$unix(r4, &(0x7f0000bba000)={0x0, 0xfffffffb, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\t'], 0x18}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x6, 0x1, 0x8aab, 0x3, 0x0, 0x4, 0x4000, 0x2, 0x1, 0x1, 0x0, 0x40000000000000, 0x7, 0xb3ef, 0x3be5, 0x6, 0x7, 0x1e1c39d, 0x7, 0x4, 0x81, 0x4, 0x5, 0x100, 0x40, 0x8, 0xf05d, 0x2, 0x6, 0xfdb2088c00, 0x2, 0x800, 0x9, 0x190c, 0xa2a9, 0x4ae, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8000, 0x20, 0x100000001, 0x0, 0x6, 0x4, 0x40}, r5, 0xffffffffffffffff, r3, 0xb) recvmsg(r3, &(0x7f00003d6fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) [ 553.935423] binder: BINDER_SET_CONTEXT_MGR already set [ 553.941269] binder: 16153:16156 ioctl 40046207 0 returned -16 [ 553.951676] binder: undelivered death notification, 0000000000000000 [ 553.967035] binder: BINDER_SET_CONTEXT_MGR already set [ 553.972680] binder: 16153:16156 ioctl 40046207 0 returned -16 [ 553.973989] binder: 16153:16165 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 553.988349] binder: 16160:16166 ioctl c0306201 0 returned -14 08:39:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f00000018c0)=[{&(0x7f0000001780)="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", 0x132}, {&(0x7f0000000400)="f00d88050b7bf8b7abda0a3c925f950d9a5e32a3bd0107b2c6ee199b4d76b4f42c86bdb7c956fc57532209b4d3b5737fc5f0e17ac391299ad434b54b86229ad7c04256160b4740f1fefd2fb26c2ff38f23d1023c1da069fa68a58816289c28cafa60257990297493e99997c8f09819e54b7979c001965b9450e244521f0968d4c6", 0x81}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000200)="9ae1ee0e1bdcbc2f4622594bff8ec83671dfaf303e49f52a6eff0fe11eea3a7b3ec0244699c932da15020793b05cfe2c726bceefd7ef1fce8ee2ee60750d941eb127f544c844d993da", 0x49}, {&(0x7f00000014c0)="c27e38c764337bdcd3452bfa762f80aa0e2cb8cd1a2eebf78edfea83ff54f3f889529aa46bd0230bcad4be1b9c4f6b1e0f8417beef5b8bdace6c4d2cc31f7ea90be3c3d41973940e43035d44826e3f695d34abce786d63668b812db9e56e558ee16c3fea303d2ecad9ebb6faf79fb5a791b7a289916bd5a2e2b4ec36de7588cb7d797559dfc9002979a9e6fdb7e4f22260499367bb08ece978e29bcfda189edb0c24c23757b11d1bf5984448424ac40f3e417678e50f4707a95e10440e6802cdc22160203a5cd7fdd1944c244fe13a8f2c97070a3063ec", 0xd7}, {&(0x7f00000015c0)="b89964a7b46e8ff8e520604c0e447c87cfa3e29125033f5d73b78b11d12cf83d56f93097fead969935483ae8f3f7c5f5eb64e6caedbaf93ed7910cff9e929d223a27a30056f1d4448debf69aac6878bba2b12277ca8b4784783211d7eb35b4613e0bdcd48aa51217f890e4cafa3098fc9707b17b79cbe7315bb970b26a36abea865afdfaf5a597b74b39a92adba397e4d2fb24037aad5164fae1e70ab4eb393b60faa47f1744", 0xa6}, {&(0x7f0000001680)="eee29011dd472303badf0c5ddeddcefaf17052d2a95854836509605bf788b21d621c96d4786aa9e46534851d0ce6dddd42475702a35632bffd781a7832fa463d42aadc91d51199d60ee11ce0dde4a4b3be1a4d09c7d50e83dfbd82", 0x5b}], 0x7, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xfffffffffffffddb, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000100), &(0x7f0000000140)=[0x38, 0x18, 0x20, 0x0, 0x48, 0x28, 0x28, 0x28, 0x28]}, 0x7}}, @request_death={0x400c630e, 0x2, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f431d38eaec50f8"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x100000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', 0x4}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl(r1, 0x8916, &(0x7f0000000000)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000080)=0x100000000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) ioctl(r1, 0x8936, &(0x7f0000000000)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioprio_get$uid(0x3, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 08:39:49 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='}/userselfeth0ppp1\x00', &(0x7f0000000180)='security\x00', &(0x7f00000001c0)='\x00'], &(0x7f0000000300)=[&(0x7f0000000240)=',\x00', &(0x7f0000000280)='$@,@\x00', &(0x7f00000002c0)='(&,\x00'], 0x100) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="008baf2534ef2d75004edaa932b3f41f1163060907ca7da18ebb0b2c30e1d3d2060e506696a114c604c656"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 08:39:49 executing program 5: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) getegid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000380)="8f49a09923c48209a75800c421f16310c4c1175829420f8200000000c4228d8c2c82c4618968c4c4a1adfc9a0000010066d04a0bc4c2394667ce", {0x1}, 0x0, &(0x7f00000003c0)="44e670c423dd6bb00000000000410f5bd78f49f09301f20f7dd18f69c89208c442bd9c5899c40140c6b8000000000cc4e2791c7fab65f20f2aaa0b000000"}, &(0x7f00000004c0)={&(0x7f0000000440)="2666400f73d2c4f241e105467b00c481dde92d5b000000c442d9038fdf9300000ffeea460db8000000c42119f1d7470c00430f61fa", {}, 0x0, &(0x7f0000000480)="8fc9b092edf3410f70da8847d9fc650f1b62f440ff2bf2460f8c0a000000c4227d59580044dc7a99420f01ddc4e17973f400"}, 0x8, &(0x7f0000000500)) perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x0, 0x10001, 0x0, 0xde4d, 0x0, 0xffff, 0x1, 0x7, 0x4, 0x0, 0x0, 0x6512dd2a, 0x0, 0x0, 0x10001, 0x7ec5, 0xb12, 0x9, 0xffffffffffff9a6a, 0x40, 0x6, 0x4, 0x60000000, 0x4b95, 0x5e, 0x2, 0x4, 0xfffffffffffff000, 0x6, 0x2, 0x8, 0xffffffffffffff00, 0x6, 0xc1, 0xffffffffffffffeb, 0x4, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x3f}, 0x20, 0xffffffffffff8c04, 0x8001, 0x2, 0x1, 0x4, 0xd8}, 0x0, 0xf, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) pipe2(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000014c0)='./file0\x00', r2, &(0x7f0000001640)='./file0\x00', 0x1) bind$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000001500)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000700)={0x3726, 0x40, 0x5, 0x8, 0x67e9}, 0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80), 0x0, 0x8000) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) write$P9_RWALK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="640000000000000000000001020000d3a8c146dc319695c9650d00020000000000000000000000000000000000000000010000000008d8d46f3ce4f58323245bed5d8768a220000000000000d902000000020000000000000020040000000700000000000000800100400007"], 0x6c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000001580)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) waitid(0x1, 0x0, &(0x7f0000001540), 0x80000003, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001bc0)={0x0, 0x0, 0x2, 0x3}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="153f62010000000000000016cded2b8e6bc44c2d4668626a") write$P9_RFSYNC(r5, &(0x7f00000006c0)={0x7, 0x33, 0x1}, 0x7) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) quotactl(0x7ff, &(0x7f0000000280)='./file1\x00', r6, &(0x7f0000000600)="b112bda22b4ad820b479eda513ed78599f00ea8b12b1840553f42eece5e66e1ac5a7df4f909ab2529ca9173f111bdc5f8af3f0ae88b5dedab75d8b471228303e52f3200bfc63aa33a0e5f28ddd16a917f128f9b058283d6c5935432ec312016b20d6a29853f4c107639d43ab4d5bfd97f11dbc29dc2caedf4f9dfc6074ec940d80748d0cf60380a6ff1f5eb1f7") 08:39:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:49 executing program 4: setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) setreuid(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x400000, 0x0) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={'bond_slave_0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r3) [ 556.705806] binder: BINDER_SET_CONTEXT_MGR already set [ 556.711531] binder: 16178:16186 ioctl 40046207 0 returned -16 [ 556.719038] binder: 16178:16186 unknown command 941441807 [ 556.724914] binder: 16178:16186 ioctl c0306201 20008fd0 returned -22 [ 556.746022] binder: 16195:16197 ioctl c0306201 0 returned -14 08:39:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f00000001c0)=0x30) r4 = geteuid() sendmsg$netlink(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)={0x18, 0x1b, 0x200, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x6f, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}]}, 0x18}, {&(0x7f0000000400)={0x368, 0x1c, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0x108, 0x8b, [@generic="d678410c4e8d89354113f2a6a51d162be84fb543f2c9b072ea6daa960049e8977f37b1cb5dcf59e7c3bcf7d181358a8b7965e3d0ce8cb28b948674ac38f92cd9f3b28a4a042fb341644310eadb8039800fda6cb357707e91e4fa3aaaa95e0eb11159793d749337790d04d86c9590b81d530bb02e4b5d2e86896f05d0a5bee724200f2dad5e72ad1c116bc355776658dba31b11de19ee1bf035a07ec0652ad1107ec00c1c3e2b51e459c3393dd840a7273e60cbcd250a279aeee145f78d9c3c860acd99d24fd2a7a937029039f34b1956200f23ee96472aa61b7622e9a1acfe0d5963f8a25ef0c18e1dc3c3ea2f70bc41c2d38618e7", @typed={0xc, 0x28, @str=')em1+\x00'}]}, @generic="da5eb7f25be12530b6fd3e1780583638a91a2c098b336ebee3d6d2faccf041f96124c486f0ac0cf88bc5f598c0cc32d45d1d28c371263858f9a183cd8bc6f283f6f8d0c5fc2a2864faeda486282d59de4e5ed1915146", @nested={0x1f8, 0x57, [@generic="825e8f1fe3be9de12e46dd5156a9d7ddd09d49c320eb37b47520e9d1a0bd2e4966f7a750f4f17d1cb9383afb424ed8e1d5810642bcde5b5cf156f143bcd00857d4db5042086d1374afc9324a54d755bc9d9c3ec8b2b976b0390d55fe6d6eacc882bf29f972b03086cb0ee2a744b793c630ebab1f984fd6128b0d39c6f9b6e436a3b3692d3583cc323a999e25f1037b63bf923b413599304d8e9b911e6114594e82f626568be3751ebbb83d4b3845aca78f9affaef2446c10795d4d5a67df3d1809ce4767f6caeecd99", @generic="23232f121dda3080dbd3dbdbb8b6bb82530b85372b875dcc6a55fc24b1c77ebcc9fb37051e53855f6a77ec9349a33e59422d03a1c35a01b8efb526aafac32b83080af5192751b776e39fb56e6263d068cabc8da7ac5d50d458a75fe4ed6f4cc2c45348794e96abe9b4380167f83971ba0a1dba8b3845ff9826b71905065065a255164a45cb6813c94f0c45800a3f82509e60878308facac5", @typed={0x8, 0x33, @u32=0x1000}, @generic="85fd3266bd4a5fc871df1f079c5539cd9678b6df4944bac30075cf044d87f9bd0a0b7a40c56452cf4989cab9d53017de27da2ad817282ead2c9d549dcf8d8d74ae1106d1936b48689b3ed7c4a5ca696755b2265b5bb3cad7e077fa8fd684b98dd9fc0a97a15af7a947fa58095d0a9210a20c9771", @typed={0x14, 0x79, @ipv6=@rand_addr="f3a0d26fd49727b22a60ff78b61567b6"}]}]}, 0x368}, {&(0x7f0000000780)={0x168, 0x2b, 0x0, 0x70bd27, 0x25dfdbfe, "", [@nested={0x158, 0x70, [@generic="96a9cefa2a2c6fb462d0b9bd230e7578bf10e3a2dc879026934f0869ee4cdd7e4a47133ab19348f2d838e7a3dfcda45a88f688eced73c6e790d9f9753e582151beebb089d7346740c994384dc60250ce44613688fb2dbe372da90b23419df2e661c47ab095bfed69f99b1a4d1198dbc5120cbb9b6e6cd33ec5959cb90f6ce5c7936c8ea6c8183530294686d5f630ecc64d1080be133fbcf3ae154aff0e9987e9f65df4a07cf263ebec551297007b93e128c55951ecc7739b2f88a5d65a69da36993ff73adf9e3e9db6d273252d411f4b3a5fe2", @typed={0x8, 0x37, @ipv4=@multicast2}, @typed={0x8, 0x52, @uid=r4}, @typed={0xc, 0x39, @u64=0x2}, @generic="eb5639543983dc844d04eab1e9b04b2010d8769f00ffca1edcf4ed712bcbf1c34161fbd82a87d036262bcf7fd57d0b0ab2a7de373afd39e5ac567476e042dd", @generic="5bd16c953e5b50d797505b95861deab572261693106dc5a4b4038ee880c6", @typed={0x8, 0x50, @fd=r3}]}]}, 0x168}], 0x3, &(0x7f0000000940)=[@rights={0x10}], 0x10}, 0x0) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e4f5e30694ea73f883996bbe6710dbafe009fcaf8c15f85b33961600"], 0x18}, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$inet(0x2, 0x6, 0x200) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r6, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) close(r2) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syslog(0x5, &(0x7f00000002c0)=""/161, 0xa1) [ 556.752064] binder: BINDER_SET_CONTEXT_MGR already set [ 556.768725] binder: 16178:16194 ioctl 40046207 0 returned -16 [ 556.794543] binder: 16178:16186 unknown command 941441807 08:39:49 executing program 1: prctl$PR_SET_MM(0x26, 0x1, &(0x7f0000fff000/0x1000)=nil) 08:39:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x100000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', 0x4}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl(r1, 0x8916, &(0x7f0000000000)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000080)=0x100000000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) ioctl(r1, 0x8936, &(0x7f0000000000)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioprio_get$uid(0x3, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 08:39:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)=""/242, 0xf2}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) prlimit64(0x0, 0x3, 0x0, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x3) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x2, [{}, {}]}, 0x48) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r5, 0x0, 0x0, 0x4003ff) write$cgroup_type(r5, 0x0, 0xff9c) fallocate(r5, 0x0, 0x0, 0xfff9) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0xffffffffffffff38) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200, 0x0) lstat(0x0, &(0x7f0000000240)) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x74, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3be5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0x1, 0x6, 0x5, 0xfffffffffffffe01]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4811) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x82) [ 556.803742] binder: 16178:16186 ioctl c0306201 20008fd0 returned -22 08:39:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) eventfd2(0xcc06, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffcf5, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:49 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)}}], 0x1, 0x2, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/30) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_targets\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) 08:39:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/snmp6\x00') ioctl$TCGETS(r1, 0x5401, &(0x7f00000000c0)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00', {0x0, 0x4}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9a7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00', {0x0, 0x0, 0x0, 0xffffffffffff0c78}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}, 0x45c) [ 556.900263] binder: BINDER_SET_CONTEXT_MGR already set [ 556.919786] binder: 16213:16218 ioctl 40046207 0 returned -16 [ 556.929817] binder: 16213:16218 ioctl c0306201 20000000 returned -14 [ 556.941682] binder: BINDER_SET_CONTEXT_MGR already set 08:39:49 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_create1(0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x80000001, 0x0, 0x8, 0x1ff, 0x3, 0x3e, 0x8, 0x287, 0x40, 0x212, 0x0, 0x1ff, 0x38, 0x2, 0x8, 0x2, 0xed}, [{0x2, 0xd, 0xff0d, 0x3, 0x20, 0xc906, 0x1, 0x7}], "b0b8d2fc2560707b5bfb5601b9f017a82dae85fda0038ccdd4023ece7aa3bab1b40d1c77a03df802a20f5f950a37ea301de07e4bd5ee10608c9a9d91f5745e83b54ea7f8117b4211d10fdbf915b25df3a0b1d01c9a22b51128edcf515339a35de000e59f16c819d492460c91fbe2a53675b7531b0acab46ddff5b636d4b900928ed1a51e9ce650c8bf2e7b429804f94d843cc4d0b99b7da41311c5c1c5c0210503a12b201d37390dd21a87f3f2226babb2ae366ba1167b96f4bcdabb7017daa8c297f62b3ecd982c2ba8f37fdc6ccfc62d", [[], [], [], [], [], [], [], []]}, 0x949) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:39:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="056304404389781f1a3d9c410d01330f9500caee6170776d2ac0c6a7767c00"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) fallocate(r0, 0x11, 0x200, 0xffffffff) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000080)={@local, @empty}, 0x8) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x10000000000, 0x1000, 0x9, 0xffffffffffffff81, 0x9, 0x6, 0x80000000, 0xa1f8, 0x9ffc, 0xfff, 0x10001, 0xff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x3c, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e22, 0x3, 'dh\x00', 0x6, 0x2, 0x25}, 0x2c) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x10200000006, 0xffffffffffffffff, 0x0, 0x5ff00000}]}) [ 556.950372] input: syz0 as /devices/virtual/input/input22 [ 556.960519] binder: 16213:16218 ioctl 40046207 0 returned -16 [ 556.966544] binder: 16213:16228 ioctl c0306201 20000000 returned -14 [ 556.986591] input: syz0 as /devices/virtual/input/input23 [ 557.029579] binder: BINDER_SET_CONTEXT_MGR already set [ 557.042371] audit: type=1326 audit(1550997589.786:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16238 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x5ff00000 [ 557.042461] binder: 16237:16241 ioctl 40046207 0 returned -16 08:39:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x3, 0x0, 0x1, 0x7}}) write$selinux_load(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000d980000800000007000000402c0009000007000000000000000000000000385a580000"], 0x38) [ 557.075863] binder: 16237:16243 Acquire 1 refcount change on invalid ref 527993155 ret -22 [ 557.089667] binder: 16237:16243 unknown command 1100758298 [ 557.099489] binder: 16237:16243 ioctl c0306201 20000000 returned -22 [ 557.132387] binder: 16248:16249 ioctl c0306201 0 returned -14 [ 557.143091] binder: 16237:16241 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 557.158168] binder: BINDER_SET_CONTEXT_MGR already set [ 557.167402] SELinux: failed to load policy [ 557.173098] binder: 16237:16243 ioctl 40046207 0 returned -16 08:39:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:50 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000001680)=0x0) setregid(r3, r4) ioctl$KDSKBLED(r2, 0x4b65, 0x1f0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0xfe0, "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"}, 0x0) fstat(r0, &(0x7f00000016c0)) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000140)=0x3, 0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='GPL-\x00', 0xffffffffffffffff) add_key(&(0x7f0000000440)='syzkaller\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="b8b24b5d72acf33ec88fbdef87019a04977c9f202aa4e9c9e7aef6ed9239f28db801322ab11999f0a5a83494d3030989b98eaafd95a526b2a34e8c6e918acd5d5244928edb990e6d6bf542011c8e9aa51b8be69fe1d88411ef5fdc675227a1cfb073185a031baf5d893b1271", 0x6c, 0xfffffffffffffff9) keyctl$reject(0x13, r6, 0x1, 0x8, r6) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, [], [{0x4, 0x3, 0x0, 0x101, 0x6, 0x7}, {0x28dacab3, 0x8, 0x7, 0x67ff, 0x1, 0x8000}], [[], [], [], []]}) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, r1, 0x0) syz_emit_ethernet(0xfffffffffffffeec, &(0x7f0000001740)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b409000030000080000000000000000000ffff020000000000000000000000000001810090780009040060b6ee7e9b19fad9ac360127b7000000000000ffffffffffff000000000000000000000000004ea1ab9a67e2d66f0000951cb5caac9d93c906297cf95a6a0d230ef0ac766d7c69bc56e1eb90bb790a7b4df248dc64305cf8434716f940c528e55c17d290"], 0x0) 08:39:50 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x3c5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x1fffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fremovexattr(0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000001c0)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000700)={0xf, 0x1f, 0x1, 0x20}, 0xf) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) syz_open_dev$binder(&(0x7f0000001640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000004c0)=""/14) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000007c0)={[], 0x10001, 0x0, 0x6b75b489, 0x0, 0x5}) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000380)=""/176) 08:39:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getrlimit(0x9, &(0x7f0000000180)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2e3cc168feb2bd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x27) [ 557.174441] binder: 16237:16251 Acquire 1 refcount change on invalid ref 527993155 ret -22 [ 557.179895] binder: 16237:16253 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 557.207835] binder: 16237:16251 unknown command 1100758298 [ 557.217029] binder: 16237:16251 ioctl c0306201 20000000 returned -22 [ 557.277572] binder: BINDER_SET_CONTEXT_MGR already set [ 557.290608] binder: 16262:16265 ioctl 40046207 0 returned -16 [ 557.333438] binder: 16262:16271 unknown command 1757494318 [ 557.355582] binder: 16262:16271 ioctl c0306201 200001c0 returned -22 [ 557.375985] binder: BINDER_SET_CONTEXT_MGR already set 08:39:50 executing program 5: mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x2020040, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x83}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'eth0eth0trusted'}}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000000b9c0)={'batadv0\x00'}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000400)='./file0\x00', 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file1\x00') 08:39:50 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xa000, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x16, 0x100000000401, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, [@typed={0x14, 0x2, @binary="b8e02709575f96896413dba537"}]}]}, 0x2c}}, 0x0) 08:39:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'lo\x00', 0x3}) 08:39:50 executing program 5: inotify_init1(0x807fc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000003380), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0xf96d) unshare(0x40000000) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') [ 557.389601] binder: 16262:16271 ioctl 40046207 0 returned -16 [ 557.409506] binder: undelivered death notification, 0000000000000000 [ 557.416604] binder: undelivered death notification, 0000000000000000 08:39:50 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x800, 0x7, 0x7fff, 0x6}, {0x5, 0x5, 0x1, 0x2}, {0x5, 0x7fff, 0x1, 0x1ff}, {0x9, 0x0, 0x10000000, 0xfffffffffffeffff}, {0x9, 0x100, 0x8, 0x9f}, {0x61, 0x13, 0x8000, 0x6}, {0xffff, 0x16c, 0x9008, 0x9}, {0x1400000, 0x2, 0x8000, 0x1}, {0x100000000, 0x40, 0x5, 0x1}]}, 0x10) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f00000001c0)={0x7}, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x8) io_setup(0x80000000, &(0x7f0000000240)) [ 557.511232] binder: BINDER_SET_CONTEXT_MGR already set [ 557.519332] binder: 16282:16286 ioctl 40046207 0 returned -16 [ 557.537773] binder: undelivered death notification, 0000000000000000 [ 557.550194] audit: type=1326 audit(1550997590.286:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x7ffc0000 [ 557.577028] audit: type=1326 audit(1550997590.286:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x7ffc0000 [ 557.602614] binder: BINDER_SET_CONTEXT_MGR already set 08:39:50 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x242603, 0x0) write$P9_RREAD(r0, &(0x7f0000000100)={0xb9, 0x75, 0x2, {0xae, "60263bde554a88082be896e25a2e44bbdce8b454948c883a63bdfa0360679f0ecbf0fd05d46959736ab1d0250714746d52dd6f958f72be93dc46ff540cb8e3e62f9913a5cec0b2f6ded6bfe213a617ad9ce2a0c95236516ddab7bb2eb221526eec53e1d6db3b7def91d520cb97a75be754920c774a0964d064b0734771718470fbf65d65d8d3613bf369afba485a32dba9030ee4b7f3395431861d7183a0f44a5a5d1ef3433fb15b0b68e97d26ad"}}, 0xb9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000001c0)=0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000200)=0x7) [ 557.608530] binder: 16282:16286 ioctl 40046207 0 returned -16 [ 557.626693] binder: undelivered death notification, 0000000000000000 [ 557.643166] audit: type=1326 audit(1550997590.286:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x7ffc0000 [ 557.661061] binder: BINDER_SET_CONTEXT_MGR already set [ 557.685026] audit: type=1326 audit(1550997590.316:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x7ffc0000 [ 557.700750] binder: 16297:16298 ioctl 40046207 0 returned -16 [ 557.716648] binder: undelivered death notification, 0000000000000000 [ 557.724917] audit: type=1326 audit(1550997590.316:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=54 compat=0 ip=0x457e29 code=0x7ffc0000 [ 557.760866] binder: BINDER_SET_CONTEXT_MGR already set [ 557.766351] binder: 16297:16301 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 557.773525] binder: 16297:16298 ioctl 40046207 0 returned -16 [ 557.793804] audit: type=1326 audit(1550997590.316:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x7ffc0000 [ 557.849819] audit: type=1326 audit(1550997590.316:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x7ffc0000 [ 557.875116] audit: type=1326 audit(1550997590.316:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x7ffc0000 08:39:50 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x1ce) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) fstatfs(0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000040)='Y', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000440)='+', 0x1, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fe2918d0469e190ba571c6fc"], 0xc) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/98, 0x2fb, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xf4) 08:39:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x37) fcntl$setown(r2, 0x8, r1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xfffffffffffffffd}, 0x1fa) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x13, &(0x7f0000000040), 0x3d2) close(r4) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f00000001c0)=0x54) fcntl$setsig(r2, 0xa, 0x12) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x20000, 0x0) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000240)={0x2, 0x6, 0x0, [{0x8000, 0x80000000, 0x6, 0x3a, 0x0, 0x9, 0x1ff}, {0xa0, 0x1, 0x2, 0x9, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffc}, {0x3, 0x5, 0x37, 0x8000, 0x4, 0x3, 0x2}, {0x80000001, 0xffffffffffffffff, 0x81, 0x80, 0xffffffff80000000, 0x5, 0x8}, {0x7fffffff, 0xfffffffffffffab8, 0x1000, 0x73ee, 0x1ff, 0x1, 0x40000000000}, {0x80, 0x0, 0x6, 0x3, 0x8, 0x1e, 0x200}]}) dup2(r2, r3) tkill(r1, 0x16) [ 557.908654] audit: type=1326 audit(1550997590.316:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x7ffc0000 08:39:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xc8, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:50 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x11, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x7f) unshare(0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r4, 0x1) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x70, 0x26c0, 0x1ff, 0x7, 0x400, 0x0, 0x9, 0x80000, 0x1, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x0, 0x0, 0x7fff, 0x1, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x101, 0x7, 0x4, 0x6, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x3, 0x0, 0x1, 0x4, 0x7, 0x9, 0xa220, 0xb850, 0xffffffffffffffff, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x180, 0x7, 0x2, 0x0, 0x7, 0x8, 0x3}, r3, 0xe, r0, 0x4) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) [ 557.946481] audit: type=1326 audit(1550997590.316:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x457e29 code=0x7ffc0000 [ 557.972159] audit: type=1326 audit(1550997590.316:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x7ffc0000 [ 558.035271] binder: BINDER_SET_CONTEXT_MGR already set [ 558.045737] audit: type=1326 audit(1550997590.316:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x7ffc0000 [ 558.051809] binder: 16311:16315 ioctl 40046207 0 returned -16 [ 558.080530] binder: 16311:16315 ioctl c0306201 20000000 returned -14 [ 558.088797] binder: undelivered death notification, 0000000000000000 [ 558.100542] binder: BINDER_SET_CONTEXT_MGR already set [ 558.104197] audit: type=1326 audit(1550997590.316:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x7ffc0000 [ 558.107099] binder: 16311:16315 ioctl 40046207 0 returned -16 [ 558.130837] binder: 16311:16322 ioctl c0306201 20000000 returned -14 [ 558.166194] binder: undelivered death notification, 0000000000000000 08:39:50 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x235218901066e076, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000200)={0xc, 0x0, {0x55, 0x100, 0xc000000, {0xfffffffffffffbd8, 0x8001}, {0x7, 0x4}, @const={0x883, {0x9, 0x2, 0x6, 0x7}}}, {0x51, 0x4, 0x8, {0x37c0000000000, 0xfffffffffffffffe}, {0x3, 0xe060}, @cond=[{0x3f, 0x100000000, 0x2, 0x7, 0x100000000000000, 0x100}, {0x7f, 0x1f, 0x5, 0x6, 0x10000, 0x7}]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c634ae48e0d97e1099370989bd074826c6fe26f2c79821f161fee71dfeb"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304000000e6a61abece7488f7e897e63515e527bee3297faf5472a49406fcc14cc7494bcf65b314d34f8e"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02790c4000f65a00"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) [ 558.184880] audit: type=1326 audit(1550997590.346:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x7ffc0000 08:39:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 558.215704] audit: type=1326 audit(1550997590.346:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=128 compat=0 ip=0x457e29 code=0x7ffc0000 [ 558.222654] binder: BINDER_SET_CONTEXT_MGR already set [ 558.247163] binder: 16337:16339 ioctl 40046207 0 returned -16 [ 558.255557] binder: 16337:16339 unknown command -464887028 [ 558.264525] binder: 16337:16339 ioctl c0306201 200001c0 returned -22 [ 558.281110] binder: 16337:16339 unknown command 287493 [ 558.286557] binder: 16337:16339 ioctl c0306201 20000000 returned -22 [ 558.298421] binder: 16337:16339 unknown command 1074559234 [ 558.308340] binder: 16337:16339 ioctl c0306201 20008fd0 returned -22 [ 558.325838] binder: BINDER_SET_CONTEXT_MGR already set [ 558.331047] binder: 16337:16351 unknown command -464887028 08:39:51 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='I', 0x1}], 0x1, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="d4e5ae0d21272973983aef2cbf0886be5c6e2d6e7337ed5ab984367aeaf38554110e75d22322f7c9f433927dd951096a51379bcd954b9a4bb8bd8a510ab3a83d63c5401e91c4db296bf669ed32dafd52c4bc3957481d52c1de70820459d666cd81ca8a18da7757ed9658e27e085cecf9c50762f3756495975377840fcdc63768c10b0a7f350718", 0x87}, {&(0x7f00000000c0)="b18fb08fd167ff08951eb97032576b00765d44edac02ed6061159cdf08e6c9e1412c", 0x22}, {&(0x7f0000000200)="87ece3dcfebc567852f1b859f4e5ff5662691748c84f0a1bc527e17949f938adec41d86284c9860835c25218b73c24854deb1743b4bff6def90ac6ab25c05b7d94680338d33fc612575241a6135de8c4efd208e079b79e4630b39768908ddebd6b8fa34c8e40dc3902394539817c4c97341fd49ace900bbe244d448511d37cf7abeaafdaeaddd8d155c7e0c59af8d019271cc489893210bbcdf53799a1db8d5b4f178c1b3a64373ce1a709258428e6bf414fb3a0171795f045f790b14cbaad3d11b45c3d1be3c6ecbc94710800444fdcea200fb7177b08d45878f64d262a6d0175f2a42213972c74f7722944be02c30d1209074bb059ef9cf2", 0xf9}, {&(0x7f00000003c0)="ef3ed5f99a41da0a4341ece193779b664a0edacb7337cd9b9e6809d0d02387977b18604808cde762c4ce86543723c2631d3579c99bbcb8b28426873fb60e7680c552233586240cc47434f0e1e683d938f50d1f17221f729e824f2e0c98106134198ca9a7c446725d3a3c5388bb51c84c727a681e2aae3ccb3a4480dd85b6523eb3b96e3a1887b6d867d05d66a580d509801a7b50ed634962940631a96bfcbbdffc662d4f6dda2e60cdb49dfd891ea7663ea9f6143034c6993c628eaad51c9735e48daea41baf7d21144e05f0a9c92e0b9c3f3f014e20292f603dda90e1f027efe1514eba2e22bcdc4d6215548c16034858d9d2aa643a33c2b3d87255dfeedc1776990015d1ce435f94ceacb07a626b4303c6a5a37a65ccf2e5ba99da78eb591a6ea7fad3917b99c11003fda12347a797654150c90913d76798cbe7702259d45113ad06e0c8a451d76bf558deaab685d3c5b2fe2523e7862260543cd7aac8c506358707a60405fc705bd8c781fe506a551a18e20b11db8e3aad445719af9dcb1245aa2755600310c095c14cb59fd7ce0a7ad83ebc2530cb6a985daf57716c2cfbcadb9810b9f09c1da15a1989fcaca3cf3de42a1c2175baa7176bfbcdb1208638f41c6761a3d38055d9199b90e31a5619b23125e3c3f04a4bb21f0d293eee4f3fde1836ebecfefb140c380f2f57c1b6c1e7b26b76d6f3ab460e5d1ee249c4afa423e53421c2f0566d27ea1454fde913613f5c584164846f5a772abef1a70b14b7feb003b757d6a2e7d6aca7556fe9f4595fbe83e4f3a033b13c19d756191a94cdc1d242c5bbae35ebfec540dfe24c9e9253d6ba19ead0f002305b914bc7e96074129aab9867fef2c9634d35cf4f462e10140f537addd1a09bd965a997a486e8e56e7a61ead9f83e520934988f3c7101e847bf73c31118b594e61c0002c41558945c9d0ec5e132f4409e893e95da4ba42208e9f2ba2f2c8f1f6cd067b1995de1bc5be68cef6294d3f5e36af4b71e796df8b35c3b920fe09fbb9959f72047365909d2216b3e6b79c8b21b0f86b2aa13f7cf595a69244f36608f1a3de27a2c12a1b3281401d850045378faac5ba801f12aee4e19fa6456888993d0b695ea70941ff8efee0174f1e2a684a87c1b68bbd516b0f73eb152d881050325b03c894696d9d5abad78b107b07d8114526d646c1d62eda7947da700ef70e9c3701b1fcdbf64152b53eb8ce82d3085d0dd0b0cae332d633bb73d26fd33f1d784fc28adbba8619db70fe2e4f67793b09fd606cddf4c1d4d27be436afeb160d71ef0a4bbe910c314954e9f3c6863ef208a3ffaaab949e91e475ac331ac67545594db61e95da051d9a90f8ff7bf2c9deaf73352650203b3fbd53df29dcaf1ce803a3b83a355e98bb3a3dab19b9520a0347ce50f97f81640d3e211dd916e36e4610fcb67f71fd60ec1abf16a2214eb5302ea34c6de27cfe1de975331234d0bac6ae4f6790cc987291e0bb67b9d38d6dd62ac6b477905c7aed12914d2c4643b2d58a4b6a559560a15f5c92e299d51d395113c34e0934afd58c18717234ea4b2f68cde3235b7291cc285d2dcb63f97565d98d3d7c41809e020a372849550115887a7af8ecfb218c2eb2b133e6e95fca01bc7832c529797b002c05b3af4d6852928d0c9772c20e8741adf1f6a84ff18339c5e9c5ecf870787a217ea50688a0c5865207b1c8ac29419befbb8f3f32a2f9f31b8a2caaab02f8bb066e9fc8a6dc860c87650a1cbf7eceae921763628cb960943d7b5d3cabf1556d2d372179ec3b44ab587507ce8d3ac51ab9d71f0d6bec4627782ea4e604143c3f816ab9dac9a4fa30abfd351e6603c088c3dc4244294b7210090d5d8ad98863680dc7a46488a7dd79176bca48c8eaf5ed180f295533d3e2ded49682b684f6c4eda6e4f335279d3b263b04f1faf0ca6ecb080d589ef7453f72bf1383ada36a8530a109fcd410cc821e92d4f68c235ad28d90f9273f88632b7dc3023caf78a882e73e269c491461602a34077c0b5992e7185ae6ed4ecfb8602aa3d2237dc993d4a61c1739d1184ef891c5fceb77e9c466b9cce6bd6dd50b73ddd36fe872838f5c27df9b3f619f15e2076b6b5ca78665890296775cbe180e55c10674c566eab43093810e0baa1267df6e062c7598eb4d0d96a682212530626a36b3fc64b27a21c966ff2f73522832619b70b5d4b37bee2949da1263a956bc7ec8e02f325b7e864ef04627ab7c20d8586a23bcb587c028211e923b72ce1ddab1e0c0e5ccc3b85a5f032b391d027c173228efd14cf2387267b0f8560ba56666427b54ee416fdd7db88ca48d407ac3d7fff6210e7b246a4bed27215c61a6a7ae2a684969996e1c7fd5bfa032464375dc1600f81e6c9244e959d233d109362e21aab14e0755754009686320dc5922391ae7c8e897057ee05b500d0349e29dca8db4d22f03793d0877d660f0e520026eea83fe48dc5cd3a40fbe0ee9038228b169179e7fae307620f175b5185a269a266aa0e2cdadf7977561f5de8587a64baba5a19557cc097e0963b72f055b88a9c605f8cc4e75b500ebbbbdb9228e5eb60512258d15ad608fb674a92fb879eb0a85dcb8f62dea3bf1ca3d34d117b98a3835916c95d570e9618915854e55c3b56ef952860a55d8a459fe8d6508da3a4688feb23eaa5784b7511664b1e92ba230c54a50a6fe6889fca773ae068c68f6d169c645e808f37e9954bccda3eafed5c0fa5e852741c413a26259125cedcec9877a1758baeaa78ac4f19909c700c7370620d36957e5c63ff2563fbec46070897b4067689d96dc7c34b8e9759c0106f01df36a4cac57a7159f9c97db05776a1824b8659a685700858bc58c26f6fc35755ca68a21835ba5fbb98a090809d09bf598e652868554b4f12bb12b5a1811f5cf58be9a944777824343f332602d8415b2b96db549d3dc2c26e8489037e38d4461efedcbe72990f86254e6f54f773fa715380318ebadcf7ae35126a60ad0b5df1353ac90050f62b25b09d4ae86bc3bd076e8e5c163993a06ba8b1e7bc7e464285d9c6ecb604dbf602c48333f3fbe9c0b8f5b8781b919871d9ad57b3db29e4ca40462f2322ea01bb5b906597cddec46267193ded50075e82790d76abca8157826ebdbf39159819acbf47d0d7400babf56c2dc6c9725d4acc417afdfc3f84b78fdb0f44f28676ebea55790aef4c6acbd6d78a6c5a194b4e5b14083bc1c6d9aa5a9a06b9a848b9b60656d27c0aee6093acd4ebb8ac834e2c162fb70f993717b3abcf527d2013a4f7debba600c1c7b572b5be86d134c4f66767b0b704c6b18d11e7935c5284839382ca8890a8c584e46cc90d68aa146d375a94f28e875d86af48f89cdbf5e6db9ce6b7d627ac6989be9663d855eff52419a573ecbd9133865b5b1976920aefbba2fe7afcbcb66da297116e287039180e0ed635cc0bbfeb7d85f7705f689e1643abf4771599cafb86293a5f63e4ca893aeb4858c9f2a9f7f022c3219dbd08d315b1acbb0dbeac5e821b0efb26d64cab5c003d92f8345836235e9e661879826cd3e143d26c0cf137dca74a46fcf2aca851060623d3eac4d7c98b19b932e72f54ac8d688f963a2dcce694b597f312a72f33f6632eb3a6ec0da65e6c061c36f8ee4101aa9015551b0a857e1ebb428459f4a9ed12bea20635981b88c6e2b79dbc76fe8971d9c1aa8081770803b369dfe2ab2b09038b2344e96b34f3a8c41fd7d14d2da3f1ba4f8a2f17de24b908522b401d4f30e835c9923a610a0adef358633e99399b92c9a72bf1b7355e9cb7440c6d5e8df865c1e98045baecdb6c578d274cf88aa81e5c5a1a7b13e2f17f68c3df992cd020a2a2ac28032ba991872c959daecad930176d09663d9262b4dfcb8f2c1a1f0da8521864bfa669dcc95e94d5ecc203af38f63f567b684c320c1f565cd1f19efd6b531d80c3bfcc61c1718b8d2b16ce9252c162b3388192b68eee81d270d4805c0a10e19c0ce6f84e3e162454b34bbdc74da32275847e2c195253d934e3006a4b8ccdeb0a13515b8e3c0dfaca8676df6a95d76738adf68102e75e9e6c23f7d5c14de585e1fc6b475b21639eba23882a65e10f5a5ea04fd7cbc89f7cafd784549b5ab921715e24662f91cf895bcf4b53c2460fa3dcca5302177cc09c792a980290a1034381abf1a245474630139691f0f210c3ed519146ca9f58a57abf383bba2fe53c10ebe27802c32be91c43b8c575c9b7d778ca59918de93ff45f818592d2e47ea3032a9a9ac3edbdcd555d9a1cd5c10b234ed41a2d4901ed3786040e04d112866ec34b1666e6d2297d7fbffae73549f1e269b64abf45f69c20d46f57b450b9daab8b545c2f72b47aaf8b3edb44e93108c61ea0496a69135d393cfaa15ea8bd04e09b57cebaa18bb7b96c53b64fd34c8f5e39f7fc4a2e03d88309ec772ec8e671b8aa51fc85bf0d1ba090859b78a46329dc7bc00ec851db11b856b06153bc21c80fc3014aadf63538cebcb3a8c5c65646ebcf768d69a9e54d4c110db4c3f440d404b1aa12626e8add5e773a36a1978c027ac4ed022d69ab48fbaf10f642bcfaf69ce6323afc7bbe471cc4519085695e219f8c9b1afa57267d343b4784d615a5b1eda00a05bb9c98c7324dc3c01ecc6d77484b2e1b52d0228a751261caf9a9ce26cd0dcf1ad519246d45c4ad51068e7a30e2c9dec62a49d75192405e5927b755eb948f91ba7568d77dc8b6721d228e80d048b4f291ee922793453fb858fa519284202add46b3473272f10e29bda40ee0b3443717bf1aedadaa0e153d44544d3fa0addefdb7c9acef746411350345c11aa8d36be2d38e3b4efb9c7300591cd4ae740b7988a7061690f2350c09fc1e1a09c4eb85477f76c7498911039fb31311522431f6e2c8e8f8e6f248179784932e89183c3d5fa0936456e87bcb9a320b63e471885bc05849888a0ee6b5d39820a79d0a50fa878112c8435dc3cc9bd6e521c3174211ebbf8129e9f5068f0b92d8985bb555ca6a5e07d2195863ac775bc2af6d70bac9f620be971868bb88a8f2bbebba92141f9f16e47472cae704fde90b3674b740cdab56c9ee75c06ed5f924cef06f2d645fe823475fa7ccdc493b05ef070d24d3734f8c55dc4ff4e8a2d9d52ebc5db6d2f5450b8fb4356af8f51d2d8fb7944e77904e7ea5ec162a2acd10257a9e3e22096429bdfdbf481049d369ea53fe9bc53328c8124643b5fe87db4e45424ddc7592acc3f3101a73ca2f30ae67a4dc1fea6042540220027f02f665b9ef8760a1b05d29f22df7ebd06afc358ec64c7a9f41c28e39e460a080f678006613d66f8dc0ed486988aa259a4264971726544270adcd514435784700121a7775619c3b67afe6b99e5469667736061343cf87196d606600dccdcd91af78cf9de219f24fb2e734a8cc238969df1318cb7eebafb5e15679465a9c91a2bc8e8e3995835369571343dbe8a5adef6ba9fcb55acf3974a25cce6f64a3c0df26da199f0a5ad15d7e556f018fa15c7766c4064a6dd27ffce32ac3a20f1b24b4217a2fa64624bc09e77717555778c77c3ea86b892637dcd08ad3b29b1e9f25d43c11c7bcf18b78d3cfe47a25bab7a46dd6fb3d3f334996d5d2fd9f70f2763b438c65d958ee53768590642277026fefcead8d1833aa0e3cc7004f8f5be0bbd9e760357b3238d487662273ada561c81faf9b1c69795983e785e3983a76ef709f3a17cf4f6d9436415e075b3315d0bbfcc1d11215ba2a8973ee5f99a5c982864c5058bf4d9e98d7fd1131aa9dc6a16f3123792b436acf", 0x1000}, {&(0x7f00000013c0)="c03a42f40015ac1378c6c9eb639f924cbf325000c86c64d500805b2a0f7aa417819a242e9b69cf97e47239074832689529f72639cd6b76d9378a8691fbcd0a3fce391f66214d3874df214daf3c28be398ff74962b8f38f977e097f2c90525a30c12745c3ab20663d3dad7e64adf5284cfdef339abe65fecda1185a02c1e09386f8a357c9b20f93f461bf9e16156105f48ba4f2e57b822a70ad845af6857d0a0bd407f470f5a85c06f9d75a285824ad7bea09b3b919dd7a22f8aa08e41c8bd2232c559b76b8a70bd5ad22f7b8be9cd0c4fa7644fd6900", 0xd6}, {&(0x7f0000000140)="4700fed5", 0x4}], 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000014c0)) prctl$PR_SET_TSC(0x1a, 0x2) 08:39:51 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400001, 0x0) recvfrom$unix(r0, &(0x7f0000000080)=""/16, 0x10, 0x40, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="84953540b465e81af7d08cabb60cc668", 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000040)) 08:39:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0300002723ffffff7f00000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @local}, 0x1, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="edcc851116132e37b8eea0a48f7bd0a2a6d66ec17749f52042ad360128d15463bc9129b846b0de90a06eec23f57f63f61fd680849975bdc7829f015de7bb12da3461627cdfeb9db2661fd903ec418d1a481aecb076db01e7d31c730ae58b7ae225cca781a88c55", 0x67}, {&(0x7f0000000400)="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", 0x1000}], 0x2, &(0x7f0000001400)=[{0x108, 0x194, 0xfffffffffffffffc, "987ea8fde74bfca212637b7298b3b3581aefc1136e01dd3cb6252916ccdce815363e8da217d2af6263dc936656e30775598cd63ef1815ff8424b3d19a4ad387891d5bf6f364118d51b72748b06a2a212f9a8cf22ac8ce205ededfd837ac7da46e2dada53c21923c95c73dbee06e6204951a28a22a8fd628dc7fe1d48111923b0a94f3bff246ba22d4aa325a6ae3ff96b2b6ccdc7526d4c66f47c0fa0a9700f9622f4b9d6826c5bdfac38076b33c33f6fdab1dfcb20918fde1d9c597139567f31c14ab622465bedee056a1d0114e39add84f7553734ac14d0bd64cc0717c2a1669a0995dc752b18f26a9912892449915f0d3ef884e560"}], 0x108}, 0x4000001) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='coda\x00', 0x8801, &(0x7f0000000380)='\x00') rmdir(&(0x7f0000001540)='./file0\x00') ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 558.331441] binder: 16337:16339 ioctl 40046207 0 returned -16 [ 558.342853] binder: 16337:16351 ioctl c0306201 200001c0 returned -22 [ 558.342943] binder: 16337:16349 unknown command 287493 [ 558.356205] binder: 16337:16351 unknown command 1074559234 [ 558.357589] binder: 16337:16349 ioctl c0306201 20000000 returned -22 [ 558.367543] binder: 16337:16351 ioctl c0306201 20008fd0 returned -22 08:39:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname$unix(r2, &(0x7f0000000340), 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', r4}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 558.433702] binder: BINDER_SET_CONTEXT_MGR already set [ 558.446387] binder: 16356:16359 ioctl 40046207 0 returned -16 [ 558.459737] binder: 16356:16359 unknown command 654311427 [ 558.465493] binder: 16356:16359 ioctl c0306201 20000000 returned -22 [ 558.474083] binder: 16356:16359 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 558.483290] binder: BINDER_SET_CONTEXT_MGR already set [ 558.489133] binder: 16356:16365 unknown command 654311427 [ 558.490345] binder: 16356:16366 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 558.495298] binder: 16356:16359 ioctl 40046207 0 returned -16 [ 558.508101] binder: 16356:16365 ioctl c0306201 20000000 returned -22 08:39:51 executing program 4: setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f00000001c0)=@v1={0x2, "d19ceb"}, 0x4, 0x6) socketpair$unix(0x1, 0x800000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x100, 0x0) write(r1, &(0x7f0000000140)="9d", 0x1) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) close(r0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4) 08:39:53 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x80000000, 0x200800) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) 08:39:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup2(r0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1f, 0x3e35, 0xa77c, 0x4f8e, 0xfb4d5fc29b870ef0, r2, 0x169}, 0x2c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:53 executing program 5: r0 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000480)='v]nt\x15\x00\x00\x00', 0xfffffffffffffffc) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000500)='./file0/bus/file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RAUTH(r3, &(0x7f0000000180)={0xfffffffffffffe8d}, 0x14) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="98bbbbb430e42382cf6300a5d409ae24d1838ddb2ed33c8a467ac995683b21cb3fc6db230e4a4c4aa496b40cc643aebb69d98b154f646a802e44d053cf22ac3de1fa79201bbf2beb65881879f3a82845cc7c33afc999d1722b6856c6b47a438ed78dc3e104f741f37d1bef791b2b94da64b9945fa44a4872d391e9e951f13ffc3f4e48c155a0ef42fb9aa4e1655c4980651a99f16e79e025a694895429e9915d80947dfa58069d62549679cbfa0460e83156df6afe500c9dd386bb80041caf0b59d19c0e119225fcf1e94822420077cc708ebb", 0xd3, 0xffffffffffffffff) keyctl$negate(0xd, r0, 0x2, r4) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x28001) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) write$evdev(r5, &(0x7f00000002c0)=[{{0x77359400}, 0x1, 0x47, 0x1f}], 0x25d) 08:39:53 executing program 4: openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x480100, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x2761, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x2, 0x4) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="00ffff0300d79383cb30935553a1ce94b3c991786af290b511fd6e62cbbfbdeb67a62f85c36b3f228b0149b438ac90e85d3dffc1953a1f5ee21575979e3cbb90ca1208d09bb470cff9ecd3f57e5c7cbb4f45fd7e4b7322a6de82f54bfc36eebb915d218b8df0f693d35c90"]) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x6f, @multicast2, 0x4e20, 0x2, 'ovf\x00', 0x0, 0x400000000000, 0x54}, 0x2c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000001) 08:39:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000001c0)={0xfff, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e21, @loopback}}}, 0x108) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6}, 0x10) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) 08:39:53 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}, {0xa, 0x0, 0x0, @dev, 0x3}}, 0xfffffffffffffe9e) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x40}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000000008040, 0x80) fcntl$setlease(r1, 0x400, 0x80000000001) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x8) open(&(0x7f0000000280)='./file0\x00', 0x802, 0x0) 08:39:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000500)=""/18) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 560.942603] binder: BINDER_SET_CONTEXT_MGR already set [ 560.944124] device syz_tun entered promiscuous mode [ 560.950836] binder: 16392:16395 ioctl 40046207 0 returned -16 [ 560.965165] binder: undelivered death notification, 0000000000000000 [ 561.000679] device syz_tun left promiscuous mode [ 561.009501] input: syz0 as /devices/virtual/input/input24 [ 561.016712] binder: BINDER_SET_CONTEXT_MGR already set [ 561.020985] binder: 16392:16415 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 561.029638] binder: 16392:16395 ioctl 40046207 0 returned -16 08:39:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) listen(r3, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r0, 0x7fffffff) fcntl$setlease(r3, 0x400, 0x2) sendfile(r1, r4, 0x0, 0x8000fffffffe) 08:39:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 561.051527] input: syz0 as /devices/virtual/input/input25 08:39:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000d40)={0x7, 0x10, 0x8000000000008}) write$selinux_load(r2, &(0x7f0000001580)=ANY=[@ANYBLOB="8c45204c696e7578150000000900000008001c0007000000402c0000000000002315c908e62da2987ab4a993e15d031da8c2433bb66697bce06294fe5e96a1504b87146b18e4ea823343182ad8ccf139479954c11ea393a8264b48bee115e31d063d92e1b9d3118218f179259a62b17550fd5d90abd7da01ee1e8c91fcb1116359048a8dce4f75ae24c963a66804b0cc40ccab395dee4be9494ab393dd46b9a041edcd2f2eb7b8d8f4fdf29da1be15a129dc906c2ba400000000010000007f3d83ec9602a73e885da69ae9c8bd7bc4dc44b63a157479e9a5d6aa2e277d193329d0cdb560416dd543eeff206fe7f6c150d3a5450aff4601ebe3b16c3f852a5b08cc3c65fef23a747fc969da6127bfc67e4b5caafb696f57c1baf75943ca0ae75a41207d837bc5f1dbd2d478c746e44abf4f7c9804a1d07cf95f5df96ef59cdccfa8bfe77518df5866780e915488493714d3af265062d5bc33e8d8df6bc402778d1af4f5913731711f168cc435ab1f0ec91227b8baf76a6b8d2c16ba4435f77734110ded8bde84111e13d69a28aff103d1aabdb554ba77470bcb324bfe9557d34bb036fc51f14872625e0bdd662616fdb5fe216f76dec1e7b7fa80884929cf2c00fb2b59829a9cd397de3dfa624329a771bb343d8b9b9022cc7d2bcb33f9434205c92ddc2dd443ac043c2b7b819a7c032723ad75e54357b6561e7541611ef52accbd6d4bfd4ccacbf9397a67d223b5f5bc0302c3270367e3e5450a4cc58a0509707341bd97a23a99984d98dbd6c4bc8b16f29b98a7a603f286be2a74e4652b2a4f976ec1ba8f09ccbb1857d93729c06a85d4e3d54eb6a28050336bb7621f5fe32beb423da8afacaf1ec4b68352f3251e95c50d3190ce18858260127bc7ceb1883f98135ee3791e819f047c49caf25544da27bd1efc25dc4e0c6a18692faea60df10a84b0c28321ef6c65171d810d295819bafd3437f175662c9e9fa76c1d418308b7982c58307a2222961a3b369f6d8f1bf5ef70ef26973afcb346f8b27dfcc345f336d7c3c5f618a0050007609748460c"], 0x2f0) setxattr$security_smack_entry(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x194) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000380)='./bus\x00', &(0x7f0000001fc0)) stat(&(0x7f0000000600)='./bus\x00', &(0x7f0000002080)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000e00)={0x10, 0x37, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x1}, 0x20000000) creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x3dc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000900)=0x9) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239) r4 = request_key(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)='wlan0]\'\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000ec0)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000500), 0x0, r4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 561.106547] binder: BINDER_SET_CONTEXT_MGR already set [ 561.113076] binder: 16422:16425 ioctl 40046207 0 returned -16 [ 561.121182] binder: undelivered death notification, 0000000000000000 [ 561.133697] binder: BINDER_SET_CONTEXT_MGR already set [ 561.139418] binder: 16422:16425 ioctl 40046207 0 returned -16 08:39:53 executing program 1: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10) 08:39:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000300)={'veth0\x00', 0x1}) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c634d362ac734e308b42a6c5bd6cbb6a5874e90798b5a07ada36b8206ccf785627c6e797eb1ab6022ff357f3eec70dd6f7a8cc7a2dafaef1e2cf4a0ea6f3b3caab827c55eb2de1376b74da691ec10598eaa8be2"], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000140)=""/118) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0502004000000070d4b454fdc2c964000e630c40000000dbb8acc554c847628c7ab325f1ea0424a3b5fbf2a6b52584652dae5e9e7b888b7b138274c05da66fedc40432cad410094146908cea28bbb110657b8adb8c881d617b2b672c85cf04d3cbcfaea5027e41158ce06347cdd038e7e4ad09f2d8178f21bdc585347816b3b9e8216db5cfc6aa7344cc4afdc4e3b7a256b573649d2315"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) write$P9_RVERSION(r2, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 561.165656] binder: undelivered death notification, 0000000000000000 [ 561.204393] SELinux: policydb magic number 0x4c20458c does not match expected magic number 0xf97cff8c 08:39:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:54 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x180, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000100)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x8e) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) seccomp(0x1, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x81}, {0x6, 0x0, 0x0, 0xffffff7f7ffffdfd}]}) [ 561.224409] SELinux: failed to load policy [ 561.237764] binder: BINDER_SET_CONTEXT_MGR already set [ 561.245557] binder: 16441:16442 ioctl 40046207 0 returned -16 [ 561.256682] binder: 16441:16442 unknown command 911041292 [ 561.268854] binder: 16441:16442 ioctl c0306201 200001c0 returned -22 [ 561.280815] binder: 16441:16442 unknown command 1073742341 [ 561.286880] binder: 16441:16442 ioctl c0306201 20000000 returned -22 [ 561.297575] binder: 16441:16442 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 561.316455] binder: BINDER_SET_CONTEXT_MGR already set [ 561.322565] binder: 16441:16452 ioctl 40046207 0 returned -16 [ 561.338263] binder: 16441:16442 unknown command 911041292 [ 561.343113] binder: 16441:16452 unknown command 1073742341 [ 561.344385] binder: 16441:16442 ioctl c0306201 200001c0 returned -22 [ 561.349983] binder: 16441:16452 ioctl c0306201 20000000 returned -22 [ 561.357083] binder: 16441:16456 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:54 executing program 5: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unlink(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000240)=""/31) linkat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f0000000580)={'L+', 0xffffffff}, 0x28, 0x1) mkdirat(r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) fallocate(r0, 0x9, 0x9, 0x7) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000340)={'yam0\x00', @ifru_addrs=@l2={0x1f, 0x1, {0x100, 0x4c, 0x569, 0x10000, 0x0, 0xfffffffffffffe00}, 0x1, 0x1}}) setxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x2) open(&(0x7f0000000000)='./file0/file0\x00', 0xf4, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x4) 08:39:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x5) 08:39:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000040), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) shutdown(r1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x414801, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000006c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000800)=0xe8) getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) r7 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000900)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000a00)=0xe8) getresgid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) r10 = fcntl$getown(r2, 0x9) lstat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpgrp(0xffffffffffffffff) r14 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001f40)={0x0, 0x0, 0x0}, &(0x7f0000001f80)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001fc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002000)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000002100)=0xe8) lstat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000022c0)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000380)="51fba5018bc4adb6f31fa9d26cda89a5c034df5aa19a0c43b4b900361bf91415cc3c9ec4e92c28b5653e4e071192a5cf7b323a14470b5fe761720296e50bfb38c30acb53e1218c724618879d1f2dfc944cbabd60fdc0b0d2c84d62bc80848418dbc7eddfcfc5af735e410c1b127a9f66434647c23d48308117c7bf0ac26dfbdaf80ccd93953d4a9442753f0a0c8683033f41f77c4993ad28c25b6357ce9704aeabe89ee97915ef9b01ecf6b072643f78112952dfc4648a07f897638de1", 0xbd}], 0x1, &(0x7f0000000100)=[@rights={0x10}], 0x10, 0x1}, {&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000004c0)="a6a4f75452de7581fd9c523ed0d38e1ee19e7020c3f55b83f011c57ed5ba394e423c33c448c1e880e6113689ba53e8923445503d94c049d5ffab1a1f5cce2e5c8089719ec245b6e67c3896126eb19d80bffd29c17933573e48bae88221cec599ae9af8e56ef4f238c4d4361257d1f78e", 0x70}, {&(0x7f0000000540)="1ea90a8902ec7a5edb73e19452341dfa791731ffaa1c571951139b6983c2e1d1a00a06b7c4f1c76542fd61d05494a7d4a2d2bf2e4fa3b45d2629fe1c7b3ef0794aa760c00b63f72e597eb68d675d3f7aa5909b552529f57f36955e5da3c62104a3fc944ca9a003ee99919621b21a374fa2132e062e9e939df3f3d65ea90d6caeaa9698f22f55", 0x86}, {&(0x7f0000000600)="5e2cc1ae36a0e7594008dd2ba2887909ecb9259712f86932be2ada6d05399fdcb8f151e1fc3c089c69daebb0cd8ff26bae9b7dedf1ade3264fcea00ff5aeb3d3d61bf197c68c2e0b57ccb9e772db8bdb3b13fbb4f19d27d7351db894f2c9b760431fa70949222aeb7129ff5605e4888828af4c2bbdefbc083db6e5a348267a97354e959a10ead1addeec0fdcb27849d1b1303390f736a9bf27cd241f53efc3f3dbb95c9d621d83", 0xa7}], 0x3, &(0x7f0000000b00)=[@rights={0x28, 0x1, 0x1, [r2, r2, r3, r2, r2]}, @rights={0x28, 0x1, 0x1, [r2, r0, r0, r0, r1, r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r0]}, @rights={0x20, 0x1, 0x1, [r2, r1, r0, r2]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0xd0, 0xc0}, {&(0x7f0000000c80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000d00)="4d812b5c7735a5288115082dbef584a159e8f279b5ab9fb53145078833d13e88a7b942eee1cdacf068ca635d4261fd8f67f1b404c92537cbb57fb034ea1ee0cae06127666d28c10e88cc98a69fdf8cb31969d46c04ddb3a157e90132a5783a1b9a8cdefc9e048b032bacab032d1dacdda6eb3efff5bdc1e941d3be1dc1c38767a73c71e18f3391afad6cd5501be908aeb52c2a38cd31adfec5c61827499bad6df832c828cc0a934e60719f81d4eefe0690749cd9d580d530fc98e0cf16afd458956b1a52589b2313b01dbada3f30a0820cf66fc6bff9fa7448eae22a5eea93bf8892323e922c908e39bff599ce01", 0xee}, {&(0x7f0000000e00)="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", 0x1000}], 0x2, &(0x7f0000002200)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r1, r2, r2, r0, r2]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}], 0x90}], 0x3, 0x4) 08:39:54 executing program 4: write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) setreuid(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x1b, &(0x7f0000000200)='eth1\'vboxnet1eth1selfwlan1\x00'}, 0x30) ptrace$setregset(0x4205, r1, 0x7, &(0x7f00000002c0)={&(0x7f0000000280)="92d1bcf9a97fc5f62492bcff4227db2d4942dea341a75ded823cfe967e30dc9cf014b3148e16130c71ceed0d92ed51034083b48912add2e9c16e4756", 0x3c}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r3 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@rand_addr="aa0f108e195d316100667b3b8d5beed2", 0xe0, 0x1, 0x0, 0x4, 0x101, 0x8a}, &(0x7f00000001c0)=0x20) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x21) ptrace$setregset(0x4205, r2, 0x4, &(0x7f0000000140)={&(0x7f0000000180)="3cba5c759561", 0x6}) lseek(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:39:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000100)) 08:39:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x5) 08:39:54 executing program 5: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'system.', '}}mime_typemime_typeppp1:/\\eth1ppp0self\x00'}, 0xfffffffffffffffe, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) [ 561.785857] binder: undelivered death notification, 0000000000000000 [ 561.855723] binder: BINDER_SET_CONTEXT_MGR already set [ 561.861407] binder: 16474:16480 ioctl 40046207 0 returned -16 [ 561.867991] binder: undelivered death notification, 0000000000000000 [ 561.873844] binder: undelivered death notification, 0000000000000000 [ 561.876416] binder: BINDER_SET_CONTEXT_MGR already set [ 561.890633] binder: 16474:16480 ioctl 40046207 0 returned -16 [ 561.901242] binder: undelivered death notification, 0000000000000000 08:39:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000300)='\x80C\x8d\x7fZ\xc7Gc\xab\xfb', 0x3) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x2}) fcntl$setlease(r4, 0x400, 0x1) r5 = fcntl$getown(r2, 0x9) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x82027e) fcntl$setown(r4, 0x8, r5) execveat(r4, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x1, 0x4, 0x80000000, 0x80000000, 0xe0}) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r2, @ANYRES16=r5], 0x30) ptrace$poke(0x5, r5, &(0x7f00000001c0), 0x1) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup(r6) unshare(0x40000000) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000002c0)={0x3f, 0xfffffffffffffffe, 0x5, 0x100, 0x9}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x8) fcntl$dupfd(r0, 0x0, r2) r8 = dup3(0xffffffffffffffff, r0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r9, 0x600, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x1ff) 08:39:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000548000)=0x5, 0xfe31) sendto$inet6(r0, 0x0, 0x75a78fb6df7c3c1c, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21}, 0x1c) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe23}, 0x2000) 08:39:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x5) 08:39:54 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) mmap(&(0x7f00006c6000/0x2000)=nil, 0x2000, 0x4, 0x800000008011, r0, 0x9) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(r1, r1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x3ff, 0x4) 08:39:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c63a9eab6a0220c1c748792d1d76988c59088953e6ad70737afd0f37c5f8dc39fd8b24fe260940917885b2d3f9bf7f843349035a160a32f6a9a037fa9d8b3750623bc8b273f89b0ad0fbd758349aeab316776ce3be2b50c8707a2c9450f94b7014511a82ffd3a63a3e0f9ada4f144f703b7ff81e684a89954087d051d727d64"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="53acf8e44cadc3177c63b925fa00"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 561.970242] SELinux: policydb magic number 0x4c20458c does not match expected magic number 0xf97cff8c [ 561.979893] SELinux: failed to load policy 08:39:54 executing program 4: r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) fdatasync(r0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) getitimer(0x0, &(0x7f0000001240)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000300)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/199, 0xc7}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @rand_addr=0x8}, 0x0, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000080)='bcsh0\x00', 0xffffffff, 0xd21b, 0x3}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={r3, 0x0, 0x3, 0x0, 0x4}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000380)={r5, r6+30000000}, 0x0) r7 = socket(0x10, 0x20000000080003, 0xc) ppoll(&(0x7f00000000c0)=[{r4}, {r7, 0x8200}, {r7, 0x2a}, {r1, 0x8}], 0x4, &(0x7f0000000100), &(0x7f0000000140)={0x9}, 0x8) write(r7, &(0x7f0000000080)="1f0000000303fffffd3b54c00711000423ca31000021e36acdd9172dcef0e2", 0x1f) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 08:39:54 executing program 5: unshare(0x0) socket$netlink(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000001e80)={0x73, @rand_addr=0x7fff, 0x4e22, 0x2, 'wrr\x00', 0x20, 0x4, 0xa}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='mounts\x004\x1d\x84}o\x1fx\xf9\xe3@\xdd\xdf#\xc5\xc2w\x1e3zt~N\xb9\xaeW~-\xbc\n\x1a\x83\xf8\x9e:\xbc^\xdb\xfc\x18n\x18\xea\x83\xc7B\xb7\x0e\xd7\aZI\xd3\'}\xbeE\xa7\x1b\x95\xd8\x92\xa8T\xb4j\xd2\x8f\x0f\xb9\x16\x00\x00\x00\x00}k>\xb9F\x85\xa8\x80#\x16\xe6\x9f\xb7M\x91@\x9c\xe2\xc0\f\xda0\xac[\xb6\xadD+e!\xbcr\xcb\xea\x99\xf4=\"\n\xae%\xc1a\xeb|\xe2E\xd00\a_\xa9\xc4\x18\xe7\xad?Bu\xd6\xf0J\xc6\x13') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2(0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@local, 0x200000000006b}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/42) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)={0x10000, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x40, @mcast2}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) fdatasync(r3) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x70) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mknod$loop(0x0, 0x0, 0xffffffffffffffff) read$eventfd(r2, &(0x7f0000000080), 0xff97) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x0, &(0x7f0000000140)) [ 562.016082] binder: BINDER_SET_CONTEXT_MGR already set [ 562.022602] binder: 16498:16501 ioctl 40046207 0 returned -16 [ 562.033537] binder: 16498:16501 unknown command -357997812 [ 562.045223] binder: 16498:16501 ioctl c0306201 200001c0 returned -22 [ 562.054282] binder: 16498:16501 unknown command -453465005 [ 562.062269] binder: 16498:16501 ioctl c0306201 20000000 returned -22 [ 562.070561] binder: 16498:16501 ioctl 40046205 1 returned -22 [ 562.083467] binder: BINDER_SET_CONTEXT_MGR already set [ 562.083691] binder: 16498:16512 unknown command -357997812 [ 562.088818] binder: 16498:16501 ioctl 40046207 0 returned -16 [ 562.094190] binder: undelivered death notification, 0000000000000000 [ 562.096768] binder: 16498:16512 ioctl c0306201 200001c0 returned -22 [ 562.118198] binder: 16498:16501 unknown command -453465005 [ 562.124629] binder: 16498:16501 ioctl c0306201 20000000 returned -22 [ 562.130194] binder: 16498:16512 ioctl 40046205 1 returned -22 [ 562.149571] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'. 08:39:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xffffffea) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1f) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000001000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x5) 08:39:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xfffffffffffffe60, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:55 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x2000000008007533, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000, 0xf}, 0x0, 0x0, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000001e80)={0x73, @rand_addr=0x7fff, 0x4e22, 0x2, 'wrr\x00', 0x20, 0x4, 0xa}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2(0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@remote, 0x6b}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000006c0)=""/42) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)={0x10000, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x40, @mcast2}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) fdatasync(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mknod$loop(0x0, 0x0, 0xffffffffffffffff) read$eventfd(r2, &(0x7f0000000080), 0xff97) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x4, &(0x7f0000000140)) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_OFF(r5, 0x7002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(r4, 0x1263, &(0x7f00000000c0)) 08:39:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c20000000000140000009078ac14140de00000010e0000000401907800d70502c6040d27c057881400f53475000000000000000000000000"], 0x0) r2 = accept(r1, &(0x7f0000008940)=@generic, &(0x7f0000000080)=0x80) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x1, @mcast2, 0xffffffffffffffbb}, {0xa, 0x4e21, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xc}, 0x1000}, 0x7, [0xfffffffffffffff9, 0x824d, 0x1, 0xc7, 0x8, 0x0, 0x5, 0x8]}, 0x5c) add_key(&(0x7f0000000140)='id_legacO\x05', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="8e065c10a57b82c350d949ea8cf782bcc24ca6a099b8a8a4d031f58a4d65e883935b8ae9b3f65ef5bdfc548004b029f1000642a19c46924ec12e84c1eaf2509b181b577ba0af0ef6647fc0e35e4da54d49f64bde120d45527095cb973ac0c0dc0b2b3cdda4d52d8e20558670fbbf2f2430208b1fc9e5313960ab6f88f8911d475c887754a6d416ff81b78b2a030d1c354c8c5bba687b06ea1222d32e6a2e15db39faa01cd77ab349440da5ef14b318d6e1964d189f041390d191fb2a46b7045c2b6ccc447b425fdfdb6c6187c74071f78394d2a8777f54a1b444f0011e771d1577167d4e777c3b4e16e3bd1ca397d56d79e6e1f6a42cca0c64", 0xf9, 0xfffffffffffffffc) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000500)={'\x00', 0x3f}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000580)=0xc) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000003c0), 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x4) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x4, 0x0, 0x0, 0x200000000, 0x0, 0xfff, 0x100, 0x8, 0x2, 0xec9c, 0x7f, 0x8, 0x1, 0x6, 0x2, 0x8, 0x5, 0x40, 0x1, 0x3f800000000000, 0x0, 0x7, 0x3, 0x7, 0x9, 0x9, 0x3e, 0x3, 0x3, 0x100000001, 0x8, 0x3ff, 0x1, 0x0, 0x860, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x5, 0xdb4a33}, 0x1000, 0x2, 0x8, 0x4, 0x5, 0x6, 0xee}, r4, 0x5, r3, 0x9) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x1000001fa) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) clone(0x70024100, &(0x7f00000001c0), 0x0, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7f) fcntl$setflags(r1, 0x2, 0x1) r5 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)="10ec", 0x2, r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x44001, 0x80) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VT_OPENQRY(r6, 0x5600, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000380)=0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000008740)=[{{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x4, 0x4, 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000740)="bc0ac61f05249bdac0e8c5791ef2bfbc2b54c936f88969692499ad63059f376639da2291e00fb6ea22b0423f308333d7f6f95ef9d4a7830bae6d783dda7e71407b2f389164a2b0e0983e19c2", 0x4c}, {&(0x7f00000007c0)="52a898c9d69a7a113da22251b781447b356a6bff3b9205ac0c6c892032eb9c75e80f2065d3b53d2954bdb5b4632899fa8c1b19dcfa750b0e74646c8e5dc3b6f6cda700f8fb231638fe0a08617fc144e473a936b59d3a228917c92d9004e87a000265c7d809968d987fa9ab34425b35", 0x6f}], 0x2, &(0x7f0000000840)=[{0x108, 0x11e, 0x2, "5eeb1085cc667304c43e673a7630368fdb1eeae788fd60df9ac49c92cee2c6d078a29f34bd89d1b306155dc6beb95fb4a0752b2dbb41fe85fd5c151b0cb137dca5388ea57bb94daac2b3025121d80285b15bf6c39b80346b8d997f265aaa679f677b38913c52d7bf966586b06fb447c1e4443a4df8b6573d935433e023f144357d15cff24b852a11283475e0840f62fd6f00e29967deb667e2469a4e697e4b6b9b1c375f8f30dd0514a50a36fb18d94fdef6572c1b974a6a54d040ca31cbeba54351a0369551803b38b7464a6556a7ec25e856d366dd6084ef238228e47e3bc2c4b12bc6a5e5183f51eb3f52fe5fa00653ec083c"}, {0x110, 0x0, 0x6, "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"}, {0x20, 0x101, 0x1000, "293291bd7ebeecbfd0"}], 0x238}, 0x9}, {{&(0x7f0000000a80)=@ipx={0x4, 0x4, 0x2, "7a922450bdb1", 0x100}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000b00)="e26ad3485952d3a52e9f887d6c1ec6d0491b0fac3946a10e2960ece725a6f7e3845cf5aca627770b5379002844ab7de5751530a8c7af4c6b6b37d2be659177b4f367223f5920b81aa86750ab82d8467724a36f55829f7a9e4819604610bd20e26de6eace51261683f42287b75b876764bca143e328b52419b730a38c98470d9f3515872a2b26cd37f706fd4a0e417c1d42c0e9340d684021717785caf698f255b4f77c830095928f069816dc0f72a450e2783a069a3fd6403eb8ce74655dc5ff0a5e71a659ca45c86fe2f9d6c0d27ca8ba845735b64507b01784df7c7284cd135d5efd323645cadb28d38e2d89022e5ebc300ed71cf9191f10faf5373955365e67b70ca691175ed6b76f34322c2071529ea71bfe0efe38ece4808bc7cf6b7e67d69d0717e93910ab96bf9755cd2079d71ff6b5afd7177d27a07fb3ea12173da93a10b07920f027fb9cae2fe062983d2ceb019eebfc3521c89d3d5a6e70ec5b8a7d3b4f1d77e61da649d40ae8239c1a75050cc3f06318ec54dfc284013626081fa955e326c9201d97ac0d5bbed317ab99a48a871ee5e6ef9ac406f508adbf96a7eaf80eca25dbfd536c59c18532795237ca571be7588405b7bba7d891923c53a05b38fb7471674c4430c900f5a8020d282c3dc7fcf25c56be2b3acbdfa77674d516b600832300f7e8d05bca08ba8076df4ba7119a0d6e0ecf9ed001dddf95af2982f3d901283327a9ba0f7fceeed66325cf2b77700ea3205e89f3e19d308a6f5b8d9cfed1d5e110a82657bc137b0979fe6eb0a6314a7bf78e69837f68b73f36669456dc1a7776ec4065916ea4c9c992cfcd8acd61f99623a70c4db26ad479742096bf49f73ecfda506725bac78c36bda4a58ce7886319f4460736bc308e1a809fd2fab96a18db243fcedfeac8acb30b7d35dafeabd6158b89cf7fcbc14f4acc9e00c6c9e03f9d00970214b277e1f437ba4a594e906aa079466ccda0d143535cc01db4256c0d6f08fada425e3318faa10f429e1b242996800375d456983db6a2433eb368f322bf944ec42984d9212393b795ffeb0eeb632268605625c0a1acd62ad6c72a11309ffe1467b4ac115083e592a2bcfa7341ff7366628983e42bb3d66e8441d1d03a546b8f4082c9a26fad3329e0e5d1b517dd92282c05d32f97491dd65d6be2dd7614561f61f8b0086ae59ef397a22ef9149096fd3a5bc9a8fa0028f986da305f78576dda174080df8a46cc13c7b2be57f677bcbed0f3ed89320b9e9342ada4d1c273c48b069f8b895008f2a09587a990829502c4bf82c9fde0ea5c468ee5531f9bfd112837fe5f2e5a8d77b7a09eb2c51560659ed45c8222643c7eb4f69976c6778746c31a77b5c36e5dc861cce1a58885f9c3e7bd5f44955a20194b6526c4e444472d2d10d19229afe84f46cdc5d24dd911595855b9313299b7ca7dafa4ca10e9e9b68fc221dc5839f3e4a081f1af83963657b9bc40463e4ea32440ca9d316bdb8d43a42f627e2ce739dc02ab4b3dc32d911297ca0b627018e4824ae0e068f4b50ec56383f60e8eb00d28687d6e05f04b85e3f5f063d6909d1a0f20e670a4562c3b3a510dba29b77f5d25f825fe4b3f0299b5f6cef9deb16afaa15aafc5839439071fe2168d066992ab0a0c44e8dfee4cb9022e0e850743c9876f87f771a220076fd568562d2693c672b92ad05b464db5bfa51d75ea6933a8cfad0e76e996f195f0b0cdc48e230f5921e02441de21dadf6cce4ef9d7a744deeefc9b5b854bbd63a93992c7a828f148669e4e2663d19afacfd0fdacdc93e2747b874f0d96a511ebdaa95b6d07311227d07214d7fe3534b1632f235c62f31fab95b40155a65dbcf29e3132fc1b745e38efb366dee6c15b015b91b87985fabce3897c1ab6133f6083c2dfd6c04ee58394ac9b1849cbef5458d77626baa9b6b03b8638fe30a88036904a9a4aaa9c75271383acb1dde0e4e655a0a29cda919f556b55cba939f6cf85936d28f678979b4e5e9d23813f807a9a71cb2f4ce8eabc9eb2af82677727c65603a3d96427bf8e7228677a062a256ab6b19e6d10c320d52193ef6c400501babfa52399bc5ef5caf47a74e375c035418c6852af80c0b118561bf7b523d2e6afe34ea4f7d5ed8560f74dd08e91220516ce53666ef81490a508dba5ac2c347a826c980cf708fc0c0bed6feb3327eebf5cbb7150787db8f02a964ea58568ad4ec4acbcf7264a9a1225627c74f680e3fb2fe2b6b685ee9140b1ce7e523b188ca3ca05a22f89a18a0bafaaa433cf49df88611872dd1b348ff1817e3b5e294bbc14dcd83e0e6739489601f0a41f27b9f0df2c166ce703578bf0dac3cb37c3764e0f4cbf749945d1fe59be868e475877f577bafc17a504f302db08b332e0e70362a87530a9372fb243f7786dacda1800d67d1811dbe698c9c8fe4f2c8c37886177ce7c97f1ebef7acbedd7557eb9e7913f5040bc585b1968b53da635ee1bcf923b43c97a938835c50dc71aab012503fa0bb1d5fb9d51d3065af5c8297fbc588603c5261e3d29cec5263b246c7b95d07c887bc7382b3d296df36540b3bd1df9aa1184b1f1ab221e3d0cdbff83b82fcac646cf28a3188a46202141570351780f52062fb8938cf0484d96b931f9341ca1617c5e3ec5d5722c367e1dee23262c82dde0859a4cf31b38883cc104a84fad730149f2488d3c6e32c39b3bb5ac8558217d604e9c1eb59d190072ff4e13b27e9ea25c0f6a4d1b0552be57f915a10f0a620e8b34d83dbff67bc442e85e9c60cdf931cf51fccd08205de95cfaa7b3f4e4d948a956b3a85c763142653d2663af38e866415bb4d2379388ca0c6a4242aa4a6321880ed6d42a815292ff508b05d3129d0f13b6de3a46c3d41dafca65cc5a848c7b22d207d89f76b6fbc6e967f091fac382ab6e7bd7bcab3992e5fc5cb85be7d6d67e423a6d5bc5f98863bd5aba27a092b9df521119435aa3dfee24321b7b6d529cacf5b37748105f33a58239a4d4e00a31571dfd0bf9fbe85cdd3bc20d9fe049d5dbfecad6d1cd7a2843890b5e0e5954719d3c410c9d6c99f1786657534ed415214f0d9e048562b8cdd6c19e32217cd804788f3053d43b8bab4023cdcd65ee972b4527150c7da5a6dcca06a3bad4df534197ec4d4a1ada2b0bb6c36799fa8919b646ab2a3adc6f59a57f5eea4bd21b9dc928d56d1f9060cdbc324000f19a72af37758e1b286b7c658623caf0d08a02c25899420bee792e74546e0704bde6bb1600b789e6877175761815273711a7738463f83ae4e3be383f7ef91515f428195b3a5027056dc3ab26047fbd51db7142791526beff93c8752dafc50af349d6f733cefda8cca4a1781fb0a709cf33407f685e4e82f150c81c17ba296dacb9602c660ef77d3b3b34c8c00f9702a73da2705cd150a336f614fb3b6e8e843cc87c070365f64e2eec2fbba9a5cc78ea0f83189b5cf078b1b78fcb83da0e2dc5efab30cedf333122bd431d882164721d01ea064f138984edeb7ea9dc25f9b829cae757bd34c732384165536368cdbb6bb6476e8b62a88e3866a80e33f4e0350b70a3f499fd17c5f422bdaa603fbb8154b37039150c47dfdb362dbe3abd7f396c00dbec114d8d717fcae5f5f2b63dcca3648bdfece552b356efa8ce5ed212bcdb2cf580bc2db9abe34059ef7aa5bc1f78c52c117f9d9605fa3c014b75326ec2fffb25d5630123fd9229141a072d00500fc65c74064784dce212687696cf7b0cd52ab7cdfa8a30565a91c67e17dda3915e3db423ae117c7255f7e66e5aa60bf3ba02257846db148b1091bc0e849e2ce93e64690ec1e3b807677147d29b98caff93667dd6b54751a3effac8efff285d48d299cfb56226fc313d1bb82c79665d267fbde133dc2a12545abfb9f9d21faf041638243bc95a70083ed6adfe44dccf250eba8a5c8fdb704793bdc961db0ab67f672ced7cf8118c4818c95e4955a163884eb9a108645a345ceb59dcd49a04c323f341e02e2ea83adbbc9aa51001a979a4669eeea49532907cee335f0173de30fd07ae47934ae50226cb74a027acade5bd111338dc48f52bb12e66b866d299fd5f938afee82efc432eeb0c58896f7635050ef5817274bdd06a645487de8eabf6b31e7c9e3c30f3c5143a18c906fd11f2b9858757105eff3981df19a30c73da635cce2c459e8e6d99141ed806eabd4aa81f33155b9ddcbe8b84ac09ea678342a19a32d4e5e63403c943f4b816dfa92896090233c635c459a4376c71e3793b11680464222d3e042dcd484b6fbbf46761a3eccd924027a1bfa89ef56d9157a41155ba3592d225b8805322ff23894c3cea387b6e135cbc5b2c42af065be6e66bba13818a38c0f11beddf21486a03b8fa94bdedeedb999d62f6da731c21ee0879ce64e55aae0d7a063ec1c9e3974293f654133c6daaa2e09062aaf649891e0067672f3971814c4de98fd407e85c24f32452d2695f6e770f36bc6ec3f9d0024b40ac42d96a99d46e57c671275a0c23e6b1a167d2df14fd5a69ea9ea955930844abb9316b7eb298d7adf40533bee065183fe29c6358f401a8a0b16a2c3d33f30e18bd9bb7e58f8962e4619a6e9714808136fe4f76c5eaa1e071655924d4ba372ebc4db9f547b656754740cbfa2f53e03e1f46042207899b731919b8ddda077d3f92944be25037a1010b59c610103d402def6f10e920b268876d0a24431cc712887599330a153dc8bee2585d7fcbbe885f4cc8e1933f6b6c9d1b2e423ae10164d5d7a999d325121663f7d3ff1949ca2032e548f4739fe50a9c5577855586adf81e9dacd37b685a279bf21dabc2c0a7d274a1caf07df31389b1a81decbf61c431bff7e775c6ab409da5b870972a5e9ee103f4ba51a978593d6aa0e8435f5ab90d96c4e29e6f8027a7483f6c106a1df5bab5f29077437eb78fe1ccd9a63499764737b13c412fed57dc30a5e3e0563996bd62844dc3a9ad6601fe1fb4ccfec21ff30f2c2db26ef36326d2d3367a933d9dc03440af073f7c9ec6b57580c2ab13d25f541882a3d34f4c2829e1b32dd7b6e1f23a893bb37ef8acd47ec096de7319fba5c36f900943bd05999d8b374e18fc33a6bcb00ba3363ddc738d178690caf1af38c370b5cd45b66daa71cae9778da99cf6cc377b9566666539b8229f72f586db21c5443a022905720bc31da89984780ff93509d528428ec41782c735cdb11ea68d3d2eb54c7ab6b404a59e873f352a647d2c53b4d463a145dd009b92e4b44c4ca75bd2599fac5785d344a862b127f79c4d03ebd81e0c1a220838aaea635af33cf5211d21cae8c4cb047870a0e18f91be696b8984a6a19d646612ec13a7d9273be1fd0fc7262d4281d459c591db260ae605a4b094ff9182f1be8fbc72dfcf2745e26bee711a85f1157674a97bb4808c79eb9e36b4e5fbc851f5c8db4be06b0ba9f00af824f3980d810eb8df5b0575879a7cdcc2bf07ce2d5fe50a02e45b22d2336163096a01ebec9451bacde281bf1dd2ed570a75d8d5ce51e0c38a83c7519426dc8960825ee69d08664512e9b08232c7081034542322dc6dfa79ce41ecb64b8a986ece3cdf3d805782f9da25b5986fa606da0610488ce6225120d3e0c120368e3a54d5ec88fa75b8a8d5d39bab2e7e6c7e8ca3c6cd3f91622228bc2eb738d4f0bbeab0bf54866741befa5655ac2301c6b097ec0d9fbdfb4e7cad955d604253c37d6153ff4a51e23b0a1f83833d0577093fd6b760719e8680ec754109f136e0187cca864f0480b82a39fefccddcfdc4e2fad4fc65b4993d80f7424e50", 0x1000}, {&(0x7f0000001b00)="d3b09cdb78e4d352a4819babbca21901c80b7557bbcea0ff0f802e6cac59c8947aa9a909742dfa325431b8407d7899c09368a21210aa7e8ab349c63b8f8d94917d2606daad492722f67bc177b75b7d33876166c413005693718727dbf05cc97dd78a78a03e97e128750a85b01c59e8e9f246497a72721d19f3e499806aefa747a86a778fd455fff991941c094a6d6bbc2d5a71d06b53ef5faf70ca75459032099f32c2c6a6efd2b29d263fd155b33047ce25c4bfd801e34a7ec3852f2306cbc98f04df4c39885671fff31b34d4928ba7d0efd1152863eb97bf3ba6b1673789511f64112f570cc92359c595d8f230e8d32d1c68a3a55b", 0xf6}, {&(0x7f0000001c00)="62e4e85f27d039ba0418f5c64d796441f867e32fdf400d603f3a21811a8237b9b76dae5295c955e2c61b3c7ee91122d46845bf48d264ae9a1f5a3e0906afecf1e4ed2a204c9fdea3ff56142d969b930027f341f00f190e7d1c5cbbc0a9117818bf570d572366272391598ab8ac0ed8a1296782e166e463fab34c38a70dc5400d7f0d6a0c3f2c1b4b5550b37b5d5fb16baeb27c012a0d7935ff75ec67aa2450da541ea0d19c029199b6bbf42e52f0f8c6f483b425c8c2f912af6717eac9cb40ac", 0xc0}, {&(0x7f0000001cc0)="bd0cfebae03cf4009f16813bcd779eaae5bb7672cf6a0bef95c56f78c31fc7fcf6f5c919e125c5bd9e22d9a43f950e415d96b5f6d0ab08d8fd969e2c468281c3902a05d88e18cc27f82bc26061bbb83994822996e952f125958449c7e0ef8ec4437233038ac193396bd3fcbd41d83af0ec580dd294b87d7bae1d6f910e4aa94e", 0x80}, {&(0x7f0000001d40)="7d2b64a5a9428abfda25efe0bb071d1182d977fcbcc9c7d31c8a427544f13f06edbe1af7d59f93fcb6f9b36a13b071242f3398e9155959ab1d58d09613dca9fb5e0da3bdc165a23f1971c6c08be2a500c083ed68615ef9e712fb32ea410a96bb8a9f3bda22368fcc1bcc9cccd6fb4ecf89f2ff7bcef584e5627fedd07410ef469a848b50a5aecbf2404b31c712d9a5f5f10129b76673bc30741f67f7099a8c031edc46f9df4494be000de029126a61b2f67453", 0xb3}, {&(0x7f0000000540)="8d8288150a0a54d18f9f55299272afc7d0", 0x11}, {&(0x7f0000001e00)="8553d776c072d3fd52d7a528db764024e7ebdc40604cb89bc89e2aaeebf648bbfb246357ce1904f35cd7bb9c576abcf8e78aa22875a92c37a6e8d4887741c957a3229c7f9852e09993084a04612d803c09d73f", 0x53}, {&(0x7f0000001e80)="cc86f16dc209422b1515f225a523324c672df83b79ef22cbb66d6661bda97ac707f64ed568fe6a7b80869e8fdee64157957d67e1c7c7158e31fd5ff1e0d78284a3bfd90196f7fa8de83aef73da5124a439a7fcf69acc", 0x56}, {&(0x7f0000001f00)="da24a924f96276f21b4c8a347b045c868ce770b1daf553404ed0c3f7b2740bffc0599bd45206c1414752dd32c4d36e9b23d2e4f933a705381e5133618969e598552b80faaf6cf34bad2f4724830186497d98be2f1c9389b20490aa5c789310f552480511e3757b5210f15377bca91644b8c292d097b7d21b22a6b834f01d64b96883f81a5820e8fb2ab81a76de75fbaa510728e738de6c79d83f7ee56b27a4874bd867b2c78571e1f966ba0076c6c18e3bf5436cc10b6e401e77170246530a0c04a4b769185636d729c132a64cecdf0c8fa7574d16b74d5cc073ca83856dfb8aca30ed40", 0xe4}, {&(0x7f0000002000)="82fa2310245186efb420de1af8fee9045e1bbb96cb5dcb16182aaf336519581162539fd1952ec9fe019745385a961e92a98b0561e38d2721b45722fb4c5bd65360e40b922999f28e7dc680e47e7a52c6442fafb33b2cace569cd0d14ee8fef32a474f9746af05684b23421027b497ef6e54a29fe3da8686405374e0ccf1f622e0d3e543558276bd35c261a5adfb7d9667c7bc758c733ec1e36abb0cb2c5c9bd6af621c86fcc9ae1d719a9196627c0a175c4e20e92b0461fe10b45c5bf977", 0xbe}], 0xa, &(0x7f0000000680)}, 0x80000001}, {{&(0x7f0000002180)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002200)="e57626d184cc0d", 0x7}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="cd5cc1404643c4c0c79cfa4c02f58508eb59832bb381bb8ba5453f3963999101490828d02df29b860ad465dd72affd2011f9865091327141", 0x38}], 0x3, &(0x7f00000032c0)=[{0x50, 0x11f, 0x64, "ad0acce6d0d6428c0b5dd2213dfa60140cd34e9e5b8099b275bfc8a8c63bfbc9abb544f924483c7e824355fab294993af06d4b92064925b28d6f1b66d78ef9"}, {0x40, 0x0, 0xfffffffeffffffff, "68eb935e8f73165cd351ec47648eb0a23060e7e676708f9a1c5c28862db97072359581503b16630067"}, {0x70, 0x0, 0x7ff, "8c1e0e06a440c2562bc7e21647e2a66bfbf63e654c3d00bc71b8ba61cce01410db3b8e4f2f45fef26231d95eeacc6235c55005006801ac55ebfda09ed9c80d8a8a3c3231e19a66b07af8938e14ec0cb0eea3ecb07ca82a298ae9"}, {0x78, 0x29, 0x8, "dd30c2c1e4ccae6ccf1d80031bbddc019e8791eba86d00507f9fbcbe36e2335546b1b086e659db0ac0bc2f4b915c3bbbad6a22f65d2a5d56f23c1532f082b7a40d641bc302071c3f1ad6760e8718b28128ddae493973729289b440e6b12d4d208c4ec3"}, {0x108, 0x78a5db4c0762594a, 0x0, "77ad5c8008f431e3df7dadd9c836385b26959b1e22c605b3765f6326a1b63f1f15f5c4d6ff71288f28aea9c8423185e7f94aa1c584b22fd6619431b2da6c2e24cb25b8c1212c84f710b5bb2098e9852df67e01c951def487f89fe88253e925f066207b71792f7deea9e8955f1e5321bccbc37f9948ddd78d735bf604bd13330f08fde710f2778c144364cb7d814b644a685a7a1151ae415650192d0c38a5c2b2f61fcc8df3bcb508bdab957fcdab8ad1ccb7b252a4921557532ebcc95f3ba8e1bc1fa952e97ee3a799214d847df6e88ba93db033720d50e05511d7aec8bb782fbb1a3d9f6564cc2bd84a32b65c80e3ecf5243026febf43bf"}, {0x68, 0x10f, 0x2, "c0d480baa57586cf290a4c64507bd30343942d574a813c40b19fead3284b442e7433f69fbb797a733e0829629c7fead55aefe81f3cefabd37da85b5cdb6c765444dda70faa64bd467cfb0841d40929b9865c480f"}, {0x48, 0x11f, 0xffffffffffffd46a, "9bd04969395f9680003dd799ff5d375e1c1e2ae06e8e3820cb2aa8434e131063c16c51a817a0511e0ea228d249a353f759abae24ed465a"}, {0x30, 0x109, 0x4e8, "4880fd40464e128be51ee7e11c9561e20271dbd6cd1fb4fff97e13f7f10884d7"}], 0x360}, 0x80000001}, {{&(0x7f0000003640)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000036c0)="994b006149307b97a867b2b9783dbfee93abc211a62d431043a481b92d59f57d9a718406a0fe50908fe53997f6adb68fb0aeb623b574df9233eeb51dc4ab02e93cd84fbaa1c395ba8d147e38e9b4316bfd389d3259af623e5c32e8420d08b996e193a13a80b2b1969180ae4567cc80d71506653d40e44045d013e5ddec519e8ddf717319bb4cb9e29ac171ffa859758c45d7", 0x92}, {&(0x7f0000003780)="8f86e508e4605c66558782c191ae5b722574a4947347bed73c6c76d7d0c3545740b308b37a4397a91a3cd88a97f89606941898f93439f74639e71ebcb7c84209d4c8cf767cb4b404bf3c9e56676791d686f16eedf6c5980af9cee3fafff3bb45ae3c3f07a5b784f5784ee6f26a0b079ff2e7547493dc3bf81c2e705f263ebc1651ee272c28355e44490a77a0e6505427fd8172cc0c03bd620e161426ed5b03e9489872dd1462307f8256f43fe421c37496c9f16ae1b67096f3671d27dc3eb387cc9c", 0xc2}, {&(0x7f0000003880)="70ff1bd5a9569c23365d761974660258286004355c7a6a614d46b00681daa0dde5fec03bd0c36b435db0bf7d25f1e4bbe70e28318013c1d5102f9236bff7ebc4230d7f93", 0x44}, {&(0x7f0000003900)="2ef779386e62038d63413bc8dcaacc5f69a059c02f6bf1a09db41bc700f5f2d31fe0c4b51e63ed255b2e3a0fa15e8f2add4c91d989ccb369429e7356dcb9e75b9351c89f4133e5eea15c22433ce008c8ffaab6a5e6e9b2db3f9fdc395b17dd8523d13c5f98a695ebb5c9a5cb4f011b8daa7c18289803993a83b325", 0x7b}, {&(0x7f0000003980)="75be72b224dbfd330bbd8e0a37cf201fd79654e549d23af5727a51e4ed83482105156aa6f4fbc583c0a817a590150bf9afae9942bd5baedd5095ff1820a8e8860068273d87e402644447a0fee83ddbc43d025e35dc8bb929b70b8412", 0x5c}], 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x11c0}, 0x3}, {{&(0x7f0000004c40)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x8, 0xffff, "ff2fc61f2ad79c97daf2312e37b4eca9703d6166b984471599a885c2a4fdb743672f3ee7df469bd17a4d2bc56c0b9e306e743f463c6f76ffef8a600d28047c", 0x15}, 0x80, &(0x7f0000006080)=[{&(0x7f0000004cc0)="843cf811ee39fe1a936d9959a0ad3e3e18581c2d039cd65f29ebffba8e3508256fa6158476ebb0803d8bd9e4da5bd6e769fad755aac68b770b36ac5eccb395502537147ef46911063f94800c9fa275b7fbf459ce9139e8a41532cac4eb6193e380817b23b73a3a7adb9ca3b4c20efe76c808a63241b4585d01135647f1fa1c57d9160f", 0x83}, {&(0x7f0000004d80)="963e265c8229590e87ff84d45688439551732a78c6bbe4cac400215dddfba3ff740f9bdb09e536b93bf0c9a91dd84d8e6bab594e1b56a827b37372c7cbbe2e228efbae048e0d3f46fc346881bdf7401d69c4f336d19f55f6bea86a87be833868bef33fc598087bec17bd575a2034aafdbca54f576514abeba2739b84221d00a37926cecf80b40d2365ce8ba9aa092876bb3f1847cfdb180212fd6cf5fee646190a3aa284870278f5fa7ad8bdb7", 0xad}, {&(0x7f0000004e40)="7f7678f0cb3be3e257179114714bfce3f1713a753760f8721121d85aa2e35f962c4048074db7ff26a6205414527de9501492b26384260d88ac82500932340eaeb5be1114c881ae8244aa9d569236767af5808b2be30b941bcc2589330895bb20f4e8ab7c988f01766f327c9e85f7b53989c07d8f7d4c6e7815e4611c33e811813bff1a9c09e3eb8cbdfb868e8d4a40439b2fda32049921355725be455be121ae5604baec1ac868819bf83fb59ed2db5dc94a1fcda0feab2481ed82f491ee12b57ded81d1259cb48527c37f2515c8f8b85667041aadc06b458dc41cc52b214cc7c3a3fe6b665aa73e519d8377521b4689dc75c45f5c69849dc4b7fa243965158400e9803e56014fa4bb668577ee2683bbe8bce6efefbbc643ef7f1c0d73ed686e6549cf98b3ff8a91f6965ed16b911c5db0bfade261ee643e64be7871425619bfb03e7db21e135c15ae1b29668ea81fbe2ff24aeaf8a2dc846aada574ab3dfd01f201b7388ab0bf296cf15d9eb2fcffcd26347d2b883731762d6a26d56d17319ddd9ff2485369ae015c9566dc40ea224bfb179cbd50cbf1e90286032dc0cfff98a09d43307af6943e8c303cce11aa8eb7ec7c603d1674d7f0801fcc963de2682dd1f4c2e58984c97025a24a5ff034ed87c518c88bb65b56f076f06c9dfe62566464afb61f7056e81fb9008be8835944dbc271a88d78a6a1a372b91e406f9339b04ed0ac95ffb25f43452e3eb8a772ced4773faf1946d1ee676213c1a5ac99243f6138134c039aa668b78b033e2b7390e1943318504dc122ef5f813f09da9408d89dc9077cbd79f0773bd1b47757886f23f952c204b49708568f86d9e1750b4a9f34a8e31626db85339bfbc216c0a720ef722c77ee998222d04b454c008111932b0e6f3ccbe3885ed797817f7852566745309003776e60f25b84ad9f98114e99d80a0d2b643ffe4e3594a0dd9564374af5192cc9263c0e12606416644463ccca83a098f8f9cc17ea4622fdbe528df31bf2ed4e834032f7fcde5486be7e4701b62886dfb4d26ea2e813ebfd7efae83fa5f2943ee2bab8928c3f447746e7c9a5089adf7d5ec355e0273c9cb26fbd134af102fb6d9e4c93abd7e030c823d0a7b9284cc1f910d4b6fb56152be238d66da4517ba66552c10c6fe0342cd4512e60773b5484939e7fabf5ff738de3f99124211ee44e612964e64217b52f35f5eddd6d0d6f0d7a901806043cc4bc14fdc808f8c7335c1b98d2d1ec1f75b2b80935032816863842c52aed23141966a916b7919e6f44ebbb519db948c7c2960ff3c2ce6c161883ad43228aca76a077ad132d40310cc9cb55f723071b82b8e3391488d361383cf6d16553d7fb377e51c1b41641639af1b71ec38131fe8e18b148d32b69bf91f992df96d7a9e0f85973ba63ff696a4cb23f229d059e608bea9aef2a3fcae7d8468fd76f5cb14cd0187081465791585df41740bb74372cd0a85c6848ada07c77c2f7be5327d15c1bfc827b2713049441ed658984c7300cebcd06977f3639c409b62b5c85c218f48f9935b8bcd488a553fec62d2016254c99722dac2468245dd26cb4faf6281745855ce36eee9c60ac4185aebc93d7e9f56c9ed77dbaa9612c38286b6f679c6d7855d600b6f734a99409abba519213eb0f13749ba5b2f04c99760c0df3380f17aabf02934a874a4a3e90106b46b2f7ba93200526508f88388bd14171ae6b1dff8c4f1eb4a550d530f350aa696dbffed6facc83c39dc13528d48fa861f3e9a70a8fd6259a30c02682d104c189965605389b3b7d061253744d024257bf6b87dc03ec961f8b77858f7714dcf17359feac6ac3ad342fd4c5aa245cdbfd8c1039888c2273f2a51abbd6a1bb6e64117afe851ece3a6f8241f96f14bbbdc7cd195cf3691920d7ca85926875dfb69df50d173e55a434d3117b9f867a9040327b24f076f74c8935249c6a37b31560cdda53478ad3ee25b624073e955688f8027ebf9149d2400a97801053274eb3a7de8ebd31740c4dac82aa51e557ace4e88e3e59d03e08eb83a1579536d7126a7ec56d36571e512e5fef38893865b858ad9e8afc5eb9fcf657dd1a2418978100be2d5d0a803d091e0102d6beda54fd467a89ed2e98ad21ea13322cda5553d497187a64b290a3efd1526c358df28f9298ea886fccb8e1cfae3cb22b193f93a55acc0dacb68f8ff785a57958a00058f0af51d3c3d8acd6a7a242fef6e3eb060dbe4e921b50926a861a3a243a7845259532b40144a852a8661727ae2ae64062da616dfdea6a1efa53f503bac6f4c55c4f4d2646756569c98a25bda45458d231ded7855773379827a2c7f5e59e6d4a0ab32ad8578b2e7a18e6eeeba7324c1a432a97755d8c0387c255be0d112e00478deb5769d23b13804a699be7e13a67266dfd00e2aebb5f70f58aa25db04d7bfe5b35e4d633bf635e6e63d68b435d27269811fadd5c5a1dd347ae68952f5ad4ce7ac3b9292a9dc4a6eeb55ff502b8cdf384e806f134db804284bd355eaed8dfcba1ec4ba3256d9cc2a74daed4e6b7bdd83dcd23a855ce22c47374f0b36303baa2781f769c3ebc17d48e1c47a4591ea875314c415aba4183d782d07425069cb71913da9c67af8505f79cfa5c40d454fb9ec7f79af43e979bad8a44a1942dc07d5a8e651cb82c68724622e7e9148f324b843c712c3f999f7411d48d385aec781a02f68db9d51268acbf244a16b99aff5943ebc6228fe9d289b499e6215e6ee92bbc2ffee75f4377e8f6f1db7596d796c168bc6ca2f55fdf5251d5ee9d6ff95cdaeda0fe3d325ed3abd5674213d7814cb8b3b17195b1b18607ed315d888caf4a9cbd7d2109fc5b1cec66a687b9ff153faefb1c2d6a97b7e7ce39b33c62e1a0549d259f69d194308dabbe4a6f40d6b6430eb6dd0b6b10115bc5ba13d6ac9e0d6ff02290957bc132512cdbc069cbcdcd871c512379dea4f9483d55dead1e497a18f9fd7278c6cb47e9da30f86de4a652e0f20aedabf317cb6216a8e66e4cc97661478b3160e123630a507c7d388054c046001100e9312a64e2f8013ea88c636d2f33a374ebc2ff03724c4ab977cf3651d0642010b4dc4bf162fa17453f843af413457ed91d7a24d49224321ab00dcf88542a8e96906be549ad96e34ae6df305ccc5b1db80a92e96ac4491bdcfbac41c3512f0bcb788395a6966bd3782e37f975ef96c267db49ed3de0001fd41f4830befc64dfe7149767895fa3aebc6494ca2e16863be774973cd2cb6818a24e23441b077a0b229f4c804f8ffda148eccdf02331426aecc1e29ed075ba341eea61f0fb349689338a72d71c5024748a28fefb28a1559615dca20841beef2b0a3da22101480b7de57869fba6c72b5eed2dcb937e32ab94f7394f18856724bef59542338033398558540836f185cfc3f06eebe3587ae9783177856fe67cb6871e854ce68116a464f0b6457c408649ce1b2d9cd5d308e977fbac1c8bd1f65a9612a280588fefb20d767312b9bc6f40af76bc453a8f06aeb8f4b248974dbcf3b8ca34fa6e63a850978fe44a2c89dfd61da8145699bade542599854d96fd5255901d8ee8d2f9cf3282888a6b33c0c7949905f67db61aeab894ddcf74dade7255958a32fa6c60ef7f43a88a69f61c251d3d0740bd1da1f5f51b0a60d2ab53fb6465e35cc44f3ddce5f3db81739425d763eb91a776103a98f113aa3d87cef408b7cafc4328143ad79d72c37f7359f010f7a2676d1e42759f6eaae7b70d9a89528575ce2d0381d78de988a0624960744a223894a2334fa27056ca1bd4153b871e618f2dbc3cb96b74cc0cf10f1b7eb824d194343ccec7fe7a1316dcb6828d651ab6413cffd4efb6c513d723eec4e7ede79f40045e6bf7bad77ae36d579675c40decbde7f71006819017aea126ddad7a46bd32605797689d964cc58351e44e9ed5298f94784ba76a1efe64da75d03ef8f86a9ad0a1c8dce63e4e0b9f03ae3fc5e5f9af4a13c6060a44794e2449b4be877455a07b69625738bc0d374e3a73d4bb6540fa39b482816fd001c0938ef67841bfcedd931b553a3ed39e4ccf256fb17525f7370bd9d7350d9f77d92841a4102d98b7732f910e562ac11385e65bbc462558299af08bb13a4af0ab914a33385d2987f3ce629c1d27b319f7d54a82011ad62e7e4122f5922f8439f989558eac328bac93ebb82cb7645bc00ae1e894185d3ca74fdcd2d75dcf0f09f8f98f46b229549179a36f07925221615a0a107207494f12a694d64791eb2af45cd338758d88fb93d1dc2cd3da68806b0848262796c42931cddbb7ad3d187e41fb3c7cc8ce25d4e7a445bd314e1fb05396fa11f601a135538e7c3d51fa58cc994bc47fb1bd6bae0594706b904e560cb8fc6e016de0027a7b2d20d476d7c50089539c1c9967fcb39183e90f8f4e3c5fc3f59a45e124f3cb9650eb6b7bee4e09715527d63a58307809bffc2e898ff120c53355a99c1c8383832d42a52afd6e45a905bb0f4f51d86b439631daaea852303f0cb5f11dde8b588eecd62b27eb5a03980cd356be1726f1391a0fe89906ccc8764ca3c7dc5da03b43778f2fe040f23cf832ce615ced096d344ab749f01ad36f7eb4e0b19de03b7bda0748d1738969e00aeafa6d5ad37b94724a3a370a96345c80bf77a84eb115a75c23fe99688c45dd4d77fa5841a54ee8fbc6021885743c939258d8f3fe56343f8a29e045912104e4c32bb9e9d5deef89d49493dba848b52f477db81b152781789bc37c677c96d0e624679e94df1a5b4838ad8e776bde755c4c4ed7ee00e705d2dd2017615a37b85b5e27d010161f1deb3631208c3458d58d577df52b857a1e1672b80a10f48f9a359a14579e5e5ba3f8d823a9ab0882362b53e153f683240c3eac3dd0e65c2f172331009f43e7961f4b266b7ff281612a2ea2e5dbf8c66f8c4ce87125e9c0cf136c3f4f74e56bed8a38f2b7a6203d376bb34f7d19291ea2136296ce3a42fa2b64c31a0fff13e9fa0ac26ea969e4ee9b3c82d7df357d6e74a9aa13b36c30c93a1b6d550a140654803dc13a48db2b50cde706e82e5f8e709ee2f638d798d9765584468c8be71fa527abc5b92e98e7d7e342653fce3c2cf01f2e0130686adb6d9473a98b1bb52ea99e23144977ef4f42e5173bef6d8ec52ba3448c1614643bb5845db65889ca9fbc25bbec7622de49af79e70cf25838c712b854707ab36e71878d246ed91bfca7e8f02924aae2249b5e4a9c53320816c57e60d51f25f9f71f83ce82bf7feffded5d7fd79dc1954c6034998edb19cc468168db61b59b11d7fbe1cf6a9b84cabc1651f7e8960ce59faf79b2efd99f94f91101ee700e66345dd11eac7d15b80b8d697bf70e56f8c8a9e8ea4d5ba4cfd0001cf2755398ae45d490cf499fd48fab36f3949566e2c4239b0636960291baf9d1f063f4bb8038c977bc6c4209df39b790bb7c7a0c1640ef2089f449c502fb6c3c8500e0a385cc01ff0c7041c34d50393c96006cb3a04c6aa07571a2f1f46803c304e0be458038481058db87c264b2e9c6cf6a7a8b4052182ceab0f218ef0f307cc9f5f165461556676f6ab35eab38ac410ea6014229040e8e17b93cbc6ceb913612cf6968c4e7274aa0322f30c1bad09df5e0d9a90eccb47163fef82ace0d56ddfdd46352b4bed8f7a797edf5ec03e9dd5ca085c798e7bb9e0c54b65dc1187af641906f0d5a4f17f6943f13e78aeef732576ca5e649320fe0655354d7d0f60c02108d8735ba94c9ae061802708da46f14e8b211c079042e3855f2f97842b96ba3fd6321e14f", 0x1000}, {&(0x7f0000005e40)="5bd54a0241e12edf3ddeee2d", 0xc}, {&(0x7f0000005e80)}, {&(0x7f0000005ec0)="d7f6595d52e1af5e90dca2e57b311bb4580ce011fa80267f0aa3112f36e5eea7adc49b2d85b6ab0baa16c654b89a69af8c1047fe7d0a17841d807fc814736125c38eaa931278376e4d71c317ebf2a2403538a47af74f22f1a0b61e75ae3e3f53ad199d7a74d8322dd40272926fe9fcac2ce64887a1c0e0b0f27eb23bd7768c854a6a1f2e4896c9982566bf2231f026e75baf8258d8f69a22904fc8d79c22a7217ffae7453bb0ef15f5f6414b552d2599782536dd1521de32ba93b83d73b254dedb661a9304bdb1b842c40c432a2f6333d51357bff4f960906425f650e029e2a0a6de895aebf07cc314c75c8bdb2a19255c95fc", 0xf3}, {&(0x7f0000005fc0)="f5f44bb7ee35f399850dc524a2d6da3fe12c4ffc94e395b1086170edae64eabc5ca66ce7d56b8e641c6910fcdcb01216729bd2a2525604c7b5384782534764794b40718cdbeaf0bfd1ffb11eca41d06e6d0c409eb84940d0dfa42fa3c76124cdf5b17a63b1b23874e6ec05383311b77c50039426831f74baaf8016fa6ad7b60ad9", 0x81}], 0x7}, 0x4}, {{&(0x7f0000006100)=@rc={0x1f, {0x4d7, 0x85dd, 0x400, 0x2, 0x3}, 0x6}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006180)="651f3e0b8c5b802b3293874a56f0571ffb50da6de66155e511c81428f1489b7e7bdf8713e5840f9d21eb31f99d8b615091c0b48d2e5c5ea421ad9df1cec3e219e3cf4888c0d09593e173374891028aacae1729e77ed0831dae7703b7126402a606052b87d899f54f129a0932ac8712982ea4c4fa045c3841e4ba67fa49e4dc267b9e19957c1fd99da14bc5fac9845c4ca7818e5ab9afb0893cbeeb62dc6c22c1e1c5f64c941c02f3fff9200d4c5c39efd69834f5c4b79a88001a42d32c868d1d492de454293ef8e54a2d92ddfb5aa6a556ba0563625d44", 0xd7}, {&(0x7f0000006280)="8d611583b5a7ca07779b94e8aee41fcc56612abd1e763bca6dae5515a2f3422f822c864eb4e87ca3caf25cd651a4c6b503f6938c42a64c135e7e5e39751ea5a66cb9772bf3c9b16a39d61913479e6cb388f4d8e3c74dba525613992fee2fcc6a81fa91c2f12073c3b0da758a0be1fcf9a337145e12abf080f2efa940ca7cd81d24275d87f8ccf804454f81f7f5b9fbc399e2eaccf8bae37ab88066b4ff10e31657bbeaee4b1fdb58d3272eda708f00d8b3c78bae09d3765cc7fc3522fd63f88c3b41bede4cb8d782aba8801544ad96b240e057282410f6d45f7c5a5940a4cad93902399b58ced26b493c5635a448ed", 0xef}, {&(0x7f0000006380)="79986d6288d89100bd393bd4965d440579cefdf9fc5a81ba9caadf98f98d68d8a287109091bac6499b46067925ef3ac46d6a5bd7c07b9b4d5284b96a5566fd78dd01b2669bb418b0de610f84b67e3153f928b3c6c6c1ce0efe7534dff55cb1455858a042a6e34f9574b63396eab6592992cf557d480682a827e1de0b39c182823eb627aaf8c3df51f374d5ca94d19c8fc39c3677ca2f8c7e4a296bfc0f6067", 0x9f}, {&(0x7f0000006440)="a6f31cd2712bb1d6dc07810feb8a2a854a74996a8d9e04755120fc1410f4464b3fdde090e602848c7e913d9eca818a6dc7eda2bfe488cccab6ded62fd5cd44498afbd0016a2a780333f2249a69534559ce2b16225c371550a9523fd30be5894c34877296654e998f76890354e61f8356bee800a16d0e1f97d7dd205b580e8ad61aa47a8bb53a6a4d341b57e4ef4545c448f15688065b659d39057246fd8620a759316ff4706004ec0dba84983929fe6a1efb947f08", 0xb5}, {&(0x7f0000006500)="4759b2485c2dada0ce0a80cc25316b43285dce82bec7c80dff6a4a1e7ee37d239b5363401783e6b1459048b5b5d8bec9d5203bbbed09d1f39ea44dc3b53b2844199b8097c82f1c0643828b29adeab8bf4711a37b19dea60b7e575e56a88a3ff97449ba0a03c46df1d205c6ef7d27cdf3a41d8b7d0fa2b7386cb3a0916b5b8c906d7b8be0d6dfe09d18b86d95ae8dc896468efbfa5732543d1582ff1550eb226ebd2eb5bd7c54203d13b1a5cea3c2ec15608c69968ff6d4d56c10e046be9328091f7762b71c71ce8d293544c89ea2311dfacf6a5b9d16ec", 0xd7}, {&(0x7f0000006600)="2726333550aefacbcd98c5466d69d53fc6b50461b4a54204dfab48372279752c9db930c796a935fba55a37b3c16bcda7d32580c67a2bacddb6f64dd5fbab99ca650287c1dc4adc22ea375b604ed99e912511671929849cc0439d0585ee4288050ce403075c77342a863934cb0b835a39596573949d37c9cf19b1ebc258d0cc09445a37ac60ed9e3c6e54c17236474e253aadeb1d4173905fff13339593c36f1a0b4998a509acffdedf0e004d58dfe264767fe35ed0615a014d2770997c1615e3e8f913f9b7349356ee62756fe7fb313255714101c2ff753e3da148a6d96bb1ad1c336ca7383d355ca0798bd54114b24ca0", 0xf1}, {&(0x7f0000006700)="20a79a5c152d39a7df957accf428506a6ce7fbd1ff3f29e15f77d15ff29251ac3984a11f6537eb0a9f3b94eb6222ed1ab15df881d8eb91d1845701e8c30207c9570c32", 0x43}], 0x7, &(0x7f0000006800)=[{0x48, 0x0, 0x7, "a05d5109cc380f05d7ab165014561a3df10e10663307da7ca02497caf4192c6cccb763890f064024252c4874f8f97d4507f46a31"}, {0x100, 0x6, 0x7, "b961a7636ce4917b1875df996226da4dd5698ba2f0894a6dbf2c1b897f35b29843b9906840dcc6f3a017971a47d953b8d0c121566fdecc3a99cc18d241f68330272cbb0ba3e9fdda9915568da0bf99a10c95e4cbb8ff4636d208401c7a66528f88fdfb80fa37482f494165b598ac70789c995a3a9add5bc1daaf1b430eadc753dd0b22d4d38d22253deb0c1a44f74ee861a3b61901b376f7cc56727d1f75fad074437e731af6b356dde18b0b47b3ed3ab905e5d92f12e9611867e166a7f067e22e82962fd3768495f16cfd484732b69895e7e365bd58217328d625f1ae3a07773b8a508d9f09db33cbcc21e90af9"}], 0x148}, 0x7afb1bfc}, {{&(0x7f0000006980)=@pppoe={0x18, 0x0, {0x1, @dev={[], 0xf}, 'ifb0\x00'}}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006a00)="53143928218e18c24872654bdb44fcf1404f5d2b68ecccab35a41b8c6a621ec7d7aaaad3baecdd9d0990a59c855cd0df609dd4c87ecea3085374cd9723559b30dc969bc058436db8168c84d8af5d6dc9ddfb434245b9573cb48a937b7763c98b8d3d731a3df38a9647437cd7f97808c77cc2353f64e69abb3acfdbfd7422f0123ed2c06af2352d8f704cae8588305adb36e2749c6e4d9409645942c55a7850a74f41b64440728f35f1f825886577f960096d25ac1d16656f8adba43c237a5a3c08a976c5b6d76dd39ac22a13dcdec2feab", 0xd1}, {&(0x7f0000006b00)="504cb92a20b351b885687f99fa098c3689124029406bb7d6c1249ee439b396393e7f6a7c3f544c21fc9ea08a3814b9f49ce8e464b6638db47da5f2d11a9448da857397e4fb57783df7f19411475b8c4e3978", 0x52}], 0x2, &(0x7f0000006bc0)=[{0x100, 0x10e, 0x0, "a34ab5cbc9ced1c9d9dde2dbbde9ff5bca14d600cd4dd589e93e3dfe2c3dd4e9d08c6c1e3bd538ba9f4787e533cf03c4fbe0a61cfbad1561cf46cedc5b19ba7d365eda961ed3ccc0983de48bae42b3d55507e7ad3e6aa5203a6a8ecc0edc33082985a33b2648cafbe7ccc740546d94cadb6d9a5e40c0cbe02f4c3d373e78babf7e325edb2011e772fda3c86047fb72264a39f7e74ad142ad1a14cb4a9844fa931186ce4458d42daa604e78ff5303c2b0f77626ced7fa63500e3d87ff5180c5970722f7c31e7411d99e3e986f685168cc94a636b2c8ec0682b8baabe9c7136c79552261d6fcb05b8a660278ad"}, {0x100, 0x111, 0x2, "31f90c4cd2ab1aee425386cc7f3109c5aad9bdbcff9138ea8584e0a7f3c2fc6a6b43e37b0422bd8de74fd66ec488fb9ed01e289d23665f8c44001c5b36d7476237c67909fc72efd2007a3868176c107f1974ec0b791a88c938b6c30edcfb5ff3eeb32c5d6c05625a524b0749239e0a03d99b82b7d62be60f7b944995ae5e52999311a8f62b0f0cf9aca948556ee812c1094c581ea3677a2bc90f0202fb09585328d8633432e22c46e2b6acf625366b093be38080da7fbe80c6d36ae0c00b5775b2af638cd5eae64de80d270a393c804728a1b292c482c872e1b5b6902daa5c3a17d41b46c4ebb686cec0f2a8"}, {0x40, 0x10f, 0x7, "7f61c035e6063b7f363eb5beaf064c4d54c8f95108b5be5e8a02d26bcaf415d808352c2f6c94f28355f22e648e1271"}, {0xd0, 0x109, 0x200, "9b0bf67bf835f8bea6714b053afc7906a090a139bce5fdecd22429fc74d474ce38f7490ed4964aac6725002d4889d21d11ac2b55f022f1a5a53f255a0ec4a7c52ec5b88c093f48c34c59ae151b1f236c58d86285c0f4d45724e36565d601cc9928d24db0ef7e1042dbfd70a529fb8be3bfd76b1b9fec7fc294e5474561dd91272b20e971a018be916efab70bb3ddd374d6af5c1eeb0ea68d9ab3cefdf083fc329f3fad972f54163f54e1b3e994a5987d411309d1ffd0fcc1402da034e8ee"}, {0xc8, 0xff, 0x7ff, "f8f50a2ca0202e2b6fd04223f77a17a6bac9f88c0ac48f13e2690f55c54ca8ccbc01ff2ce52d61fc35bcd9329dd85ab5f2c673b7e9467466403d2d5109c2a1211f2196696ba6ddaaa18daf36a31fc0d112eaa0289bd375b6fc1b083c349395ca672f36cdf13d6000320395e17fb038eebbacccac799298c7eb6ae754815adb2a291fcd4dd0c1113171a834902bfdd5ab9b301ddaa41bc13d770000a92753619c2500c09cae492ed1ef4b57ac626de34256"}], 0x3d8}, 0xc32a}, {{&(0x7f0000006fc0)=@ipx={0x4, 0x2, 0xffffffffffff5b63, "a67b18e3b901", 0x1ff}, 0x80, &(0x7f0000008500)=[{&(0x7f0000007040)="f5b6092ffd64ab4ed695c5b1e7a4c23e610febfd2a08", 0x16}, {0xffffffffffffffff}, {&(0x7f0000007080)="8d6c2874664b278a4f2fa32ff2465cf44784bf03a03b6b1667a5eb30620b2a690ff0501da2b6fbdd7a25a9b898613941c246f6e43fab9a90dae30b396865748a9ee84f9eb4664b3b6ba857a06146808c3b5b84f13dbf4970e212c9cf4cc5d4ffd3b0b9deb605e0f6b81926205fd989346603675690fd8ce6d31dee9457f310cccb26196ee9b4", 0x86}, {&(0x7f0000007140)="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", 0x1000}, {&(0x7f0000008140)="59c0d11cdd09ec2deb00b9e36895fcb3310b161da6c6a6a73f23699421f079c1ae711237f9470c8a5dfb83af98bfa051c4dce9a62aaa7a659b6f99c15c571ca1f29a7510832536e66893f93daec80fd300fd4ab7ade4ce10d1da5c68c2756dc23319d1d01fa49fa9c371469a60412d9001c8333b08c777e19db2cd06b67931a92354bcd3114557c80958c0b8943a9dd5e4069ca95c55133e64e918f1f1ca0867e657f17e59bfed79ed8ae567e12fe34e8d949e1a61406db8fccaf21a310326f6fca41263719eae27000ed75d13e2090182ac4758778abbffe88402fc5f690b32d8854bf6ab581016451c0f3e0848d2ff6b1967ade32a1c", 0xf7}, {&(0x7f0000008240)="c2a5d0d4ca559884f47ad6c5d6a55b69d515a07dd8b368c99bd73d006df73b066ccee78b0b2508b63424f001a7c8632613cdc23dcc2263b76cd5dfd75d65bcc51e166f2d11a5", 0x46}, {&(0x7f00000082c0)="1c5abd3d9c166b2a5bfd51cbd10a984ae77292ac835538524cc1c603d1a9557b6d2b01", 0x23}, {&(0x7f0000008300)="ffc89a87c0adb36dcc7270cceaf676e7c6c4c64e1753a2fe87611d7d00040d85d5fd4b5b0af8263685004f22afafdb81c489c159a258e8ffb7bb13fb5cd147e272324fb6f30e38fb0d1d93", 0x4b}, {&(0x7f0000008380)="5fa3ae9e73e048d5dbc7e4f3ea75d18d5117a667cdd8f989d8ba915898bd6e58132df48a23b6c63718afda8c5de14c2740184b0900baf0e7b4be7b97e5aa34e621049d00fc3b9c8dd4c44a225c7e5bf2d4722c0516ac91b3201b0f2f6b54cf", 0x5f}, {&(0x7f0000008400)="2343567a2d688c46c885b0cd08cbd5f7d85b55632c786362a0243c658a43c7dd308cc2053f732dec719d78733b46fe63cc1be83ecd9d79e850de03c52a124c4e3e9341f755482591dbb427f05ec098840f1cbae2be7a35dcbf732233d2a9a944b594ea8b01815c2480036bb7d97554726a765d86ef68177fe72e8cc7f766a07c1f965aa378abebc1ac9683755996186f7a02388a687658e64a6e69f8c96ca3213fdaf4c524b54252ccde3d38b1dd23d0ea48ffb40dd8d6a4fa1ffbb2ecb22a03e4ac1e460aa2ac2c766569de1537626bedad1e5d54", 0xd5}], 0xa, &(0x7f00000085c0)=[{0xfffffffffffffeaf, 0x13f, 0x1, "57ce0baff9f0a597aed4acea05e22b1eeb1a696265849cec14ef9f64473619d388afc52d72a00903f6fb1dad805738842fea398d20fd3b8907b45afad5babf6f5f50e8ae97cf9576a088e3ed6f940bd83fdf46541f81a39095ee452572ecbd082235fddccab5c99bcf6eb5245334bfcf09b1ee2cb3f2275e56fb9ef0de0346ede382ec10e46323da9a0cd0588256275824e5139055e343153e31199081e58a9794c015a203884a05947d0ca77a93ab6e49b5830b93081521ddeb50c1c7c3fe8d391f"}, {0x20, 0x19b, 0x100000001, "c43dab272e28c4ea95b1961708b0d6"}, {0x18, 0x88, 0x63f, "283f31d9322cc687"}, {0x50, 0x10f, 0x7, "9bd4da5f7f45843d6efe5c80f3efd9fb52dc29430b2305f651824b5ee52a00f9b2fe5c4dda55293e2b9507322030a2ac42411dc6300f621623f0a8d037"}], 0x160}, 0x3}], 0x8, 0x40084) 08:39:55 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x10000, 0x4005eed) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) fallocate(r0, 0x20, 0x0, 0x100008000) [ 562.613720] binder: BINDER_SET_CONTEXT_MGR already set [ 562.621629] binder: 16532:16534 ioctl 40046207 0 returned -16 08:39:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x0, 0x0) 08:39:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000b, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r2}, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="bd6ab733480d619b"], 0x0, 0x0, 0x0}) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 562.654413] binder: BINDER_SET_CONTEXT_MGR already set [ 562.665844] binder: 16532:16534 ioctl 40046207 0 returned -16 08:39:55 executing program 5: r0 = getpgrp(0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, 0xffffffffffffffff, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000003200)={0x2, 0x0, @multicast1}, &(0x7f0000003240)=0x10) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000003280)=""/47, &(0x7f00000032c0)=0x2f) mmap(&(0x7f0000000000/0x936000)=nil, 0x936000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f000058a000)={0x0, 0x0, 0x4}) rt_sigtimedwait(&(0x7f0000001ff8)={0x3ffff}, &(0x7f0000f0aff0), 0x0, 0x8) [ 562.707905] binder: BINDER_SET_CONTEXT_MGR already set [ 562.720954] binder: 16552:16554 ioctl 40046207 0 returned -16 [ 562.728901] binder: 16552:16554 BC_FREE_BUFFER u0000000000000000 no match [ 562.736047] binder: 16552:16554 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 562.744165] binder: 16552:16554 unknown command 867658429 [ 562.750452] binder: 16552:16554 ioctl c0306201 20008fd0 returned -22 08:39:55 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20080, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="88a0beb4a6b15504eb9a00") r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x9, 0xb, 0x400, 0x70bd2b, 0x25dfdbfd, {0xa}, [@typed={0x4, 0x94}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x90) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r2 = gettid() lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f00000009c0)='y\x00', 0x2, 0x1) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7d6f653d30303030d82c00000000"]) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf8d) setpgid(r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) getxattr(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0) fcntl$getownex(r1, 0x10, 0x0) 08:39:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x14) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000400)=""/242) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500)=""/248, 0xf8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 562.758217] binder: BINDER_SET_CONTEXT_MGR already set [ 562.763783] binder: 16552:16554 ioctl 40046207 0 returned -16 [ 562.763969] binder: 16552:16560 BC_FREE_BUFFER u0000000000000000 no match [ 562.777267] binder: 16552:16560 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 562.786560] binder: 16552:16554 unknown command 867658429 [ 562.792802] binder: 16552:16554 ioctl c0306201 20008fd0 returned -22 [ 562.828183] binder: BINDER_SET_CONTEXT_MGR already set [ 562.845504] binder: 16563:16565 ioctl 40046207 0 returned -16 08:39:55 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1081, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, &(0x7f00000001c0)='\x00') lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0002070000000000003d7297594ad655b8e5a4626610600dd09c6b9dc86cda6a133ee42aa210530569359c85fdc03e02000000000000003a63e987fdc19fa81cea0d21054fbcceb8eaaeefe7eccc1733ac56825a07c17fcb5e9584d513481233c118b058092f067a19f312cff8671fedf464787ce2b93c696f50a97cf56b51afcabf4b1df7d9cfc6765966e14073993d7abfb0cbf6"], 0x47, 0x0) 08:39:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f630c4000760c6671e8a579"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 562.874611] binder: BINDER_SET_CONTEXT_MGR already set [ 562.880989] binder: 16563:16565 ioctl 40046207 0 returned -16 [ 562.889861] binder: undelivered death notification, 0000000000000000 08:39:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c3f35c68b2f"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:55 executing program 5: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000240)=0x82ec, 0x4) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) r3 = geteuid() fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0xedb, 0xfffffffffffffff7}, {0x8, 0x80000000}], r3}, 0x18, 0x3) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000001c0)='ip6gretap0\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x83}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) delete_module(&(0x7f0000000180)='\x00', 0x200) 08:39:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3ff}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x80) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x48}}, 0x0) [ 562.945729] binder: BINDER_SET_CONTEXT_MGR already set [ 562.956537] binder: 16575:16577 ioctl 40046207 0 returned -16 [ 562.977680] binder: 16575:16577 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1712092672 [ 562.990972] binder: BINDER_SET_CONTEXT_MGR already set [ 562.996413] binder: 16575:16577 ioctl 40046207 0 returned -16 [ 562.997546] binder: 16575:16580 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1712092672 [ 563.055084] binder: 16593:16594 unknown command 1057776399 [ 563.063666] binder: 16593:16594 ioctl c0306201 20008fd0 returned -22 [ 563.083341] binder: 16593:16597 unknown command 1057776399 [ 563.089558] binder: 16593:16597 ioctl c0306201 20008fd0 returned -22 08:39:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x20000020, &(0x7f0000000200)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2}]}, &(0x7f0000000000)='G\xfbr\xc0E\xf1,a\asa\xb4~\x1c\xf28', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x4}, 0x1a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) accept4(r0, &(0x7f0000000240)=@nl=@proc, &(0x7f00000002c0)=0x80, 0x80800) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@local, @in6=@rand_addr="b1285fadd8504518a41c4d1fba667bbd", 0x4e22, 0x2, 0x4e23, 0x0, 0xa, 0x20, 0x80, 0x6f, 0x0, r1}, {0x4, 0x6, 0x1, 0x7, 0x28ec800000000000, 0x80000000, 0x7, 0x7ff}, {0x5, 0x5, 0xe3, 0x8}, 0x5, 0x6e6bbb, 0x2, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in=@broadcast, 0x34ff, 0x0, 0x1, 0x9, 0x1, 0x5, 0x1}}, 0xe8) 08:39:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="b4000000000000007a0a6cff000000009500000007000000fb7c878a1787f3d71d10962fd305baeed8d32f6e2ffdca3071090c7ed059ed9a5f8f44ad717aecc72c5bdfaa7fe86da44fc1b6927b7c9c240b4527d79137628b0f9ed971b43c6fe2dc70d26c30bfea556b599318493560f4ce105034a0f7d0680ee597cfcbd1771e06e57f047b53dd73a889348ddae622663acbb1e2e5"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xfd13, &(0x7f0000000000)=""/195}, 0x48) r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4000, 0x100) ioctl$RTC_WIE_ON(r0, 0x700f) 08:39:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) write$smack_current(r0, &(0x7f0000000100)='-userlo%bdev\x00', 0xd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x318, 0x0, &(0x7f0000000180), 0x1e2, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) 08:39:56 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000580)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "cbbfce", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e24, 0x8}}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0)='IPVS\x00') timer_create(0x0, 0x0, 0x0) timer_delete(0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x7) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x37) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000100)) sched_getattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) set_thread_area(0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x170, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6c29}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x996}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="dcb22e2e4a1beaae03686cb67114eed1"}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa45}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc506}]}, 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r1) accept4(r2, 0x0, &(0x7f0000000000), 0x0) recvmmsg(r1, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0xfe64, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/212}], 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x2, 0x0) 08:39:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4204000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x900, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x18, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4844) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:56 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) clone(0x2100001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000200)={'vxcan1\x00', 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) 08:39:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() fstat(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() r7 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) r10 = getegid() lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x0, r3}, {0x2, 0x0, r4}, {0x2, 0x3, r5}, {0x2, 0x2, r6}, {0x2, 0x7, r7}, {0x2, 0x1, r8}, {0x2, 0x4, r9}], {0x4, 0x3}, [{0x8, 0x2, r10}, {0x8, 0x7, r11}, {0x8, 0x1, r12}], {0x10, 0x5}, {0x20, 0x1}}, 0x84, 0x1) r13 = socket$inet6(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e22, 0x400, @ipv4={[], [], @empty}, 0x90}, 0x1c) connect$inet6(r13, &(0x7f000000cfe4), 0x1c) sendmmsg(r13, &(0x7f0000000080)=[{{&(0x7f00000002c0)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0) 08:39:56 executing program 5: r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="053fc00538ea6da5fa1ca3cc08cc90460502e00605d0417109b547a15cf2a1a2063e2a8ba77c1f242778c30f5ef72fc3e7a7e9b39f290d4cfcc0fefc1e7b386bbd7e749b99b508b874bc42daee17464df610ee50b11eb7baf0eac5c022a5a6c1b8a5ebbb0dc619b80ef057799a", 0x6d, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000500)="35ee704baddea0143197dca6f8c848a44c3155beca12a539c7276872b239b66b3431e07759bf06cac949721ff28cc7669f9dfb7d36689453f08ddc5f010a2494fce344417346b727c549f951d4b1de417f6a081b5205000000000000004f11a679353ab6e2c34e007b4538f6e3b6b3adec3f379a22ee657eae0f10b29fff7e07db7f80e09dffa51e7cacb92c1c755852db8284b171866992bdba5a8352e9ba1e93e42b3c03ec11210f15fc94332476d46a72429fc1ee3a9cc3755381d429f37898898e6ef675ce16fbc440", 0xffffffffffffff0a, r0) keyctl$get_security(0x11, r1, &(0x7f00000002c0)=""/195, 0xc3) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r2, &(0x7f0000000100)={0x0, 0xfec6, 0x0, 0x0, 0x0, 0x2}, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) [ 563.671068] binder: BINDER_SET_CONTEXT_MGR already set [ 563.681291] binder: 16608:16612 ioctl 40046207 0 returned -16 08:39:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4(r0, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000440)={0x6, 0xef80, 0x6, 0x10000}, 0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101000, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000000180)="1e2a2d80f5724e23e7e23cd397c235a550b80d3997eb9f12cb22e24e3149b5bb0f50d9973414a4fa14c0f3ed3aa3dae212a74993f1c6a11648f3bc9c740cbf8c8d9367963e9ddb0103f4cfcab1304acb0a2b5c3017ae854777010791d62e2478bbb14f3850d629b1a999210c6692916ac773e3520b8c6022057a9e28c1d495af9cc44031651f4071223d3521629d00c8c229f7275a82a5c7de7f5a0af21dabf5d97b6e", 0xa3) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in=@local, 0x4e21, 0x4, 0x4e24, 0x6450eefc, 0xa, 0x20, 0xa0, 0x7c, 0x0, r4}, {0x800, 0xc2, 0xffffffffffffff80, 0x1000, 0x1e6c, 0x7fff, 0x0, 0x100000001}, {0x3, 0x3, 0x2, 0x7}, 0x7, 0x6e6bbe, 0x1, 0x1, 0x2, 0x3}, {{@in6=@ipv4={[], [], @multicast1}, 0x4d4, 0x6f}, 0xa, @in=@multicast2, 0x3501, 0x0, 0x2, 0xfffffffffffffffe, 0x1, 0x4, 0x22fe}}, 0xe8) [ 563.715168] binder: BINDER_SET_CONTEXT_MGR already set [ 563.727000] binder: 16608:16612 ioctl 40046207 0 returned -16 08:39:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000400)="7e4c9161bdb52d19361b9ef0eff8a29acc2732b355f95dcde5d81b1a12074e5b18c6362eb7e89b8f8a4e87bed599915a4933fde3283320ed391e84bae850460f69e79bc75028210c0d6f9f34e04d6fd105aeb2eaab66b552a080e194f7b80541ae8f0d90175b1726eac16287681eb01b9c491bf7d5f1f459d2c5c092313fd71a399348bff081b1ee1b7d6fac1c3b4f372fe458b5edae12c095e78ef6fd5e08c811c33bcc40a0359019018cfa299163aa665bb81d0e6995e11882165c4cb5757c5c714a0e309d3d43dbac9f13052dc3356452b6c210955a5dcde68e71954f233bdce170e520c5ef9a3b2de80a23ed8e103e8d49cc62") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630477c3e08cea39cce593e0871f85af642de3a133ea144e5ca5364000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:56 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x4202200, 0x50) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x0, 0x81, 0x4, 0x9, 0xbf}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) r2 = dup2(r1, r1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) getpid() r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1040105}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r3, 0x120, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x280000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2b43}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0x124}}, 0x40005) 08:39:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000014c0)=""/148, 0x94}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000268, 0x0) 08:39:56 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x81fe, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x800000000000055, 0x0, 0x0, [{}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='nlmon0\x00', 0x10) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 'rr\x00', 0x20, 0x1, 0x7f}, 0x2c) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r4 = openat$cgroup_ro(r1, &(0x7f0000000500)='pids.current\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000540)=0x8020002) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x7}, 0x4, 0x0, 0x9}) syslog(0xf, &(0x7f0000000340)=""/141, 0x8d) sched_yield() ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) write$nbd(r0, &(0x7f0000000400)={0x67446698, 0x1, 0x2, 0x3, 0x3, "755eddba1f15b762a39fb9248775fc64e8f45ba50ce858419d05c462f7e7f77f19da653171eb2f0ac217b11059311418d1f164ca620f66a6e1ca0bb193701bb1c1a7de0805eea9bdc64999e8a2a0127f8e49fd387180cb4a7f1dcfa25cb1d67e874894511f6a03172e761ebe4f53ad3ec4a44e223c6bb98eebc6ab07e32d0285d4241cb89a0851454eafe2b54585115743ac08579cad4b536815e98e1186adf7ec3db44f3861a4f102f4461c02091e7c54672938e9630b9d137ede4d7bd7982fcbfb670350e8e0b9aa76c941636bb864d3d2e499da51cf184c4455380e17c7e4d0958ce1a97ca4523b"}, 0xf9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r2, 0x0, 0x21, &(0x7f0000000000)='selinux:trustedbdev)vmnet1md5sum\x00', 0xffffffffffffffff}, 0x30) fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x0, r5}) [ 563.810857] binder: BINDER_SET_CONTEXT_MGR already set [ 563.819134] binder: 16635:16637 ioctl 40046207 0 returned -16 [ 563.840966] binder: 16635:16637 ioctl 4b61 20000400 returned -22 [ 563.890182] binder: 16635:16637 unknown command 1996776197 [ 563.895878] binder: 16635:16637 ioctl c0306201 20000000 returned -22 [ 563.916188] binder: 16635:16637 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 563.938461] binder: BINDER_SET_CONTEXT_MGR already set [ 563.943880] binder: 16635:16652 ioctl 4b61 20000400 returned -22 [ 563.952418] binder: 16635:16637 ioctl 40046207 0 returned -16 [ 563.953007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pig=16651 comm=syz-executor.5 [ 563.966599] binder: 16635:16653 unknown command 1996776197 [ 563.980373] binder: 16635:16653 ioctl c0306201 20000000 returned -22 08:39:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fdatasync(r0) ioctl(r0, 0x101000008913, &(0x7f0000000400)="d92a0679e34000c86361230806c018267e076a3f36f0705cdba291b71a57a08eca9f8eb43a4942dc6f87dfba898aa18320f7ea499f926d49614206e8c68906672b016b7b38bf3a751eea29b3aaf59bf6e0af1e3f5e93b4ecfd853c04ae2b8026111c2dc9f08cd32ebca5d3f0de48e3eb3fd46c1cee72f12290332d3658d12ed974505ad585d6f31f8d63d4d9fea3d282edef78af80cef600") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563044000780d000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 563.995114] binder: 16635:16637 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 564.022951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pig=16654 comm=syz-executor.5 08:39:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100), 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x200, 0x4, 0x1f}) [ 564.117310] binder: BINDER_SET_CONTEXT_MGR already set [ 564.123411] binder: 16657:16658 ioctl 40046207 0 returned -16 [ 564.144883] binder: 16657:16658 Acquire 1 refcount change on invalid ref 882688 ret -22 [ 564.178510] binder: undelivered death notification, 0000000000000000 [ 564.180692] binder: 16657:16658 unknown command 0 [ 564.190268] binder: 16657:16663 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 564.202385] binder: undelivered death notification, 0000000000000000 [ 564.210575] binder: 16657:16658 ioctl c0306201 20000000 returned -22 [ 564.233634] binder: BINDER_SET_CONTEXT_MGR already set [ 564.250511] binder: 16657:16663 ioctl 40046207 0 returned -16 [ 564.256661] binder: 16657:16663 Acquire 1 refcount change on invalid ref 882688 ret -22 [ 564.272926] binder: 16657:16663 unknown command 0 [ 564.290065] binder: 16657:16663 ioctl c0306201 20000000 returned -22 [ 564.296653] binder: 16657:16658 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:57 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000000000)) 08:39:57 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="cef39d4e55a7ff48d81a4eaaacb75819d5edb6a7595ede74bb39eb4a1c00bd3675db5c40c3e86748c8ac102b5cfc1c5880684b922fbd5da390c2b38ed31a2781f8cf2291213665e638637727645dffd96c467d38ed78460b83") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'\x03\x00\x00\x00\x00\x00\xaf\x00', 0x1000e803}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syncfs(r3) sendfile(r0, r3, 0x0, 0x800000000024) 08:39:57 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00\x00k\x00'], &(0x7f0000000140)='\x00', 0x1, 0x1) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x5b2a, &(0x7f0000000780)}, 0x222) mount$bpf(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x3) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000440)) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x7) listxattr(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)=""/240, 0xf0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) utimes(&(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000740)={{r1, r2/1000+10000}, {r3, r4/1000+10000}}) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x4000, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000380)=0x1) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x805007, 0x0) mount$bpf(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x588e, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 08:39:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000280)) write$input_event(r0, &(0x7f0000000000)={{}, 0x0, 0x80000000, 0x4}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000140)={0x2, 0x400000004e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0xffffffffffffffe6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000000000044000) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000a00)='./file0\x00', 0x1ab) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f00000002c0)='r\x13E\xfd\xce|\x96\x81Xamf\x8cO\xcfm\xdf\xcdrk', 0x8080, 0x0) sched_setaffinity(0x0, 0x179, &(0x7f0000000140)=0x5) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000003c0)=""/42) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000009c0)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f00000000c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) 08:39:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x80, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x720, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000400)=""/118, 0x76}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000080)}], 0x7, &(0x7f0000000180)=""/42, 0x2a}, 0x39c8}, {{&(0x7f0000000580)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/13, 0xd}, {&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x3}, 0x20}, {{&(0x7f0000000800)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/182, 0xb6}, {&(0x7f0000000940)=""/34, 0x22}, {&(0x7f0000000980)=""/175, 0xaf}], 0x3, &(0x7f0000000a80)=""/224, 0xe0}, 0x7f}, {{&(0x7f0000000b80)=@un=@abs, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/253, 0xfd}], 0x2, &(0x7f0000001d40)=""/206, 0xce}, 0x8}, {{&(0x7f0000001e40)=@un=@abs, 0x80, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/95, 0x5f}, {&(0x7f0000001f40)=""/129, 0x81}], 0x2, &(0x7f0000002040)=""/248, 0xf8}, 0x401}, {{&(0x7f0000002140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/30, 0x1e}, {&(0x7f0000002200)=""/129, 0x81}], 0x2, &(0x7f0000002300)=""/87, 0x57}, 0x1000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002380)=""/126, 0x7e}, {&(0x7f0000002400)=""/26, 0x1a}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/228, 0xe4}, {&(0x7f0000003540)=""/27, 0x1b}, {&(0x7f0000003580)=""/10, 0xa}], 0x6}, 0x4}, {{&(0x7f0000003640)=@ll, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000036c0)=""/20, 0x14}, {&(0x7f0000003700)=""/204, 0xcc}, {&(0x7f0000003800)=""/8, 0x8}, {&(0x7f0000003840)}, {&(0x7f0000003880)=""/72, 0x48}, {&(0x7f0000003900)=""/136, 0x88}, {&(0x7f00000039c0)=""/207, 0xcf}], 0x7, &(0x7f0000003b40)=""/250, 0xfa}, 0xfffffffffffffffe}, {{&(0x7f0000003c40)=@tipc=@name, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003cc0)=""/49, 0x31}, {&(0x7f0000003d00)=""/130, 0x82}], 0x2, &(0x7f0000003e00)=""/52, 0x34}, 0xdf3}], 0x9, 0x40000060, &(0x7f0000004080)={0x77359400}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000040c0)='tls\x00', 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffa9, 0x0, &(0x7f0000000080)=[@acquire, @register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 564.550448] binder: BINDER_SET_CONTEXT_MGR already set [ 564.561229] binder: 16686:16689 ioctl 40046207 0 returned -16 [ 564.582937] binder: undelivered death notification, 0000000000000000 [ 564.591366] binder: BINDER_SET_CONTEXT_MGR already set 08:39:57 executing program 4: geteuid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000000180)="95890da13df01db3f8aa1d758392ebfb572338a538add46872addd566ca3f054c6e1ac96623f4ac4ad9b53e75502c0d2e0e25427c641931528eaaab9005fb62af9ecaef8730287e302905df041df56") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000001100, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) 08:39:57 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x109401, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0x1) 08:39:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000100)=""/119) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 564.597270] binder: 16686:16698 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 564.611610] binder: 16686:16697 ioctl 40046207 0 returned -16 08:39:57 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\x7f\x03\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'irlan0\x00', 0x400}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0xc000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1000, 0x1018, 0x7, {"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"}}, {0x0, "7a540dfca33b31d26f"}}, &(0x7f0000000180)=""/214, 0x1023, 0xd6, 0x1}, 0x20) write$P9_RMKDIR(r0, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x2, 0x2, 0x7}}, 0x14) [ 564.686893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16709 comm=syz-executor.5 [ 564.701858] binder: BINDER_SET_CONTEXT_MGR already set [ 564.711065] binder: 16706:16710 ioctl 40046207 0 returned -16 08:39:57 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file1\x00', 0x8, 0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(r0, 0x0, 0x0, 0x4) sendfile(r2, r1, 0x0, 0x80000001) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000480700005004000050040000500400005004000028020000780600007806000078060000780600007806000006000000", @ANYPTR], 0x2) [ 564.734745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16709 comm=syz-executor.5 [ 564.735713] binder: undelivered death notification, 0000000000000000 [ 564.751200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16709 comm=syz-executor.5 08:39:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000001000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) close(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) [ 564.784388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16709 comm=syz-executor.5 [ 564.801527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16709 comm=syz-executor.5 [ 564.808886] binder: BINDER_SET_CONTEXT_MGR already set [ 564.823369] binder: 16706:16725 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 564.831566] binder: 16706:16710 ioctl 40046207 0 returned -16 08:39:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 564.836723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16709 comm=syz-executor.5 [ 564.854891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16709 comm=syz-executor.5 [ 564.911433] binder: BINDER_SET_CONTEXT_MGR already set [ 564.919371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16709 comm=syz-executor.5 [ 564.934553] binder: 16733:16734 ioctl 40046207 0 returned -16 [ 564.935907] binder: 16696:16713 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 564.948433] binder: undelivered death notification, 0000000000000000 [ 564.968960] binder: BINDER_SET_CONTEXT_MGR already set [ 564.976582] binder: 16733:16737 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 564.978315] binder: 16733:16734 ioctl 40046207 0 returned -16 [ 564.995873] binder: 16696:16738 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 565.151043] binder: 16696:16713 unknown command 0 [ 565.156148] binder: 16696:16713 ioctl c0306201 20000000 returned -22 [ 565.166869] binder: 16696:16738 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 565.174104] binder: 16696:16713 ERROR: BC_REGISTER_LOOPER called without request [ 565.182724] binder: 16696:16713 unknown command 0 [ 565.187761] binder: 16696:16713 ioctl c0306201 20000000 returned -22 08:39:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000000c0)=@v3, 0x18, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:39:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x3ff, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x7f) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) shutdown(r0, 0x1) 08:39:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = geteuid() r2 = geteuid() fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) socket(0x11, 0x0, 0x7) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)=0x0) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) r13 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rtc0\x00', 0x400000, 0x0) write$P9_RGETATTR(r13, &(0x7f0000000740)={0xa0, 0x19, 0x2, {0x200, {0x1, 0x2, 0x8}, 0xc, r11, r5, 0x61, 0x3, 0x7, 0x6a, 0x7, 0x3, 0x7, 0x6, 0x0, 0x1f, 0x8, 0x536c17dc, 0x400, 0x2, 0x7fffffff}}, 0xa0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010005000000000002000700", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB="040004000000000008000300", @ANYRES32=r4, @ANYBLOB="0800f244", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="10000100000000002000010000000000"], 0x74, 0x1) r14 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r14, 0x40046207, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000009c0)=0xc) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) write$UHID_CREATE2(r13, &(0x7f0000000800)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x53, 0x4, 0x10001, 0x4, 0x8, 0x200, "10fc26411f274af0968cb27dc89bfb0f0069192f4755c1882a6e81ecc47657acfa57a9a3ac8d7799deede2c289bfde158a6d8a512518e7a3abec276f64a4cc679f6af24d33eb8f6e7731fdf2d957e3b4a0ebf2"}, 0x16b) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r14, 0x40046208, 0x5) 08:39:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3801000010000302000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000080000000000000000000000010000000033000000ac14ffbb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000132877430000000000000000000000000a00000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000421014f38c26fc729bc749dd3babf67aa2e048232c40262eeb831af7e6a82b2f3abf15432d1ca425304c9ba5c8ce34d3e41451017a0214bfa7ae372415ada8be1b8612ae0c7cb65791fc0714de4c3804026188fb1a9861dd16930339bf919464d9e1e5d280cd4d"], 0x13c}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x27) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x9, 0x5, 0x6}) prctl$PR_CAPBSET_READ(0x17, 0xa) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 08:39:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 565.412273] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 565.422866] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 565.423743] binder: BINDER_SET_CONTEXT_MGR already set [ 565.442977] binder: 16746:16750 ioctl 40046207 0 returned -16 08:39:58 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000000b9c0)={'batadv0\x00'}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x5, 0x1, 0x7f, 0x100, 0x0, 0x9, 0x90088, 0x8, 0x4, 0x62be, 0x3, 0xfff, 0x8, 0x7ff, 0x4, 0x8000, 0xff, 0x4, 0x9, 0x1f38, 0x2, 0xfffffffffffffffc, 0x4, 0x3, 0x7e4, 0xffffffff, 0x1, 0x0, 0x401, 0x9, 0x1, 0x3, 0x7229, 0x81f, 0x2, 0x0, 0x0, 0x6b, 0x4, @perf_config_ext={0x7074, 0x101}, 0x6000, 0x4a, 0x16e, 0x5, 0x4, 0x7, 0x6}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0xa) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x70, 0x9, 0x3, 0x1, 0x8, 0x0, 0x1000, 0x40100, 0x0, 0x6, 0x8000, 0x5, 0x30, 0x9, 0xe508, 0x4, 0x1ff, 0x41e, 0x7, 0x0, 0x0, 0x1, 0x9, 0x4222, 0x8, 0x2, 0x0, 0x2, 0x10001, 0x9, 0x100000000, 0x9935, 0x9, 0x9, 0x5, 0x6, 0xfffffffffffffffe, 0x0, 0x9, 0x2, @perf_config_ext={0x7, 0x9}, 0x0, 0x1f934410, 0x7ff, 0x3, 0x6, 0x4, 0xf66a}, r0, 0x10, r1, 0x3) chdir(&(0x7f00000005c0)='./file0\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0x90) recvfrom$unix(r2, &(0x7f0000000380)=""/255, 0xff, 0x40000000, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file1\x00') 08:39:58 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x800000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/217, 0xd9) r1 = socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/172, 0xac) fcntl$dupfd(r0, 0x0, r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r3, @ANYBLOB="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"], 0xffffffffffffff44}, 0x1, 0x0, 0x0, 0x800}, 0x84) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r5 = request_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='\x00', 0xfffffffffffffffe) r6 = add_key(&(0x7f0000000600)='pkcs7_test\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="cc69d4e041d54988298c3c1eb1323fd4d29c902ffacc2ae80aaba2765f745dce125582872a249ab641a4a26454905bb37bac4044543675ed806411aa6bf2ddc0cce262856152316e9c30bbffa49b238c62691b58c69f52d06666730cb5f86dfd52fd4df9f429ed7adb8ff4c47e8f36e4a3b4b1f5a03e254522c7ff58829aa05487ab5aff51ce3eac30c262900a33822d9c10cc6f8d1fed4235dd97b45564f87e4e1e004593e3611013d91febb5134c84ffd43b3e43b6d3ee2b47d3f5fcd71aa9485814f19862785b2c94e8e8192e25bc9fb66f7b494121c8214c090c0c6f4565706c59ffcb04cc9bade50381ac8782", 0xef, 0xfffffffffffffffa) keyctl$unlink(0x9, r5, r6) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) splice(r2, &(0x7f0000000480), r0, &(0x7f00000004c0), 0xb326, 0xf) close(r1) socket$netlink(0x10, 0x3, 0xa) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) syncfs(r4) sendfile(r1, r7, 0x0, 0x8000fffffffe) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000300), &(0x7f0000000340)) 08:39:58 executing program 5: openat$urandom(0xffffffffffffff9c, 0x0, 0x101d01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000000c0)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300030c0000000000002070b78cc560e049634000000000412d1fbc00000003000600000000c60200ee00e0000854d81458186fe8b90002000100000000000000030200244a7b03000500000000000200010000803f010000000000fca0d9"], 0x60}}, 0x0) exit(0x4000002) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000000)) 08:39:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x800000001}, 0x14}}, 0x0) [ 565.459414] binder: undelivered death notification, 0000000000000000 [ 565.466195] binder: undelivered death notification, 0000000000000000 [ 565.501099] binder: BINDER_SET_CONTEXT_MGR already set 08:39:58 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x4, 0x1) getdents64(r0, &(0x7f0000000400)=""/66, 0x42) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x49, 0x29, 0x1, {0xcdd, [{{0x8, 0x2, 0x5}, 0xa8ab, 0x3ff, 0x7, './file0'}, {{0x0, 0x3, 0x6}, 0x4, 0x2, 0x7, './file0'}]}}, 0x49) [ 565.519598] binder: 16746:16769 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 565.526906] binder: 16746:16750 ioctl 40046207 0 returned -16 08:39:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x100, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x4, 0xea, &(0x7f0000000400)="16b4b39e69cbb1481c22ab2715fa32764cc84d19c12bc6a7f2ea1e71158f1ae2953738bac2d85106777afe7a9e6f2e36e820ce01edcce80d2cbb102eb632d3b0f2c99b6adf7b0b0b931d2b383119d8724ece4f0f204c44549a7bfb1ffbeb0c322e14bd3bd4147f5b0a8870a404830d09dcb521fabada0cfcda7894297ddb32ba8ea9683a294d2d814b8b5ec5c2577275ad69995ccc5a95edb833e291d2dbf4996f9ea8a2bcd9da2f1362bba0b966265bb46433ba94c198a97ec1452bef17512044482ce9d257fe78140bc5780c54672ba3881545e509a9414c33af001a51ede662842b768e93502e9433"}) 08:39:58 executing program 1: r0 = getpgid(0xffffffffffffffff) capget(&(0x7f00000005c0)={0x20880522, r0}, &(0x7f0000000100)={0x10000000000000, 0x4, 0x0, 0x0, 0x0, 0x3ff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="ae55136db3b88979a92ec69bd8028f38a5a343b9e636401f612995525125fbf36b4f6ea8e22e031f45d1fce4", 0x2c}, {&(0x7f0000000180)="7e7f09c239c5beb4e77bb0359163157167ad91d72f84466fea45242f682107f3c7a0d5af8a3e8201948c50f178e308e378bfe94eb2e9efaea4ac18639f1b9c008bc751fef5336b797c1dde702574f114431e2b9efcb7248c89522bd30821eb50d1d50f96a969d5eceb29f3fb83df2544711b6bfb0bd3fdf1b05adffa807a3bd4aea0dd249a320c73ce1eae79641aee1ccd7921d45eb24032665792567908ce7d4ec3e10245965f6a7b80a13cbdd97fc152c3f462f378e927eb5ac5fa8705c3b3baa55af51b35c9ee0b57821381bb6a3e", 0xd0}, {&(0x7f0000000280)="36dca55ce3384a3afd4214bc25977ec58500efe81260e7207a44ea6681ee04f408efa1fd31a6be4481bb7b77161d4fe3b561f6cf715206662a7749727eb85a577fed5cd0ad32591b638ff47548aeac3073d588fc1edcf3c74dbd21d823f9c349a709515c3d5cf022b968a26426fb740e51898a0af762f9c281a52c0dfca25b75f66e3e73685aa67d780815a56c9cb5294bb1faada87b18", 0x97}, {&(0x7f0000000340)="d7fe899dba89f50067eac09002ec62a5dae8292e1c34d2bd0627878e31e9d80190679e4b47792ec34b334fff1d56f880c71a24a2132b32ad4d82d2011c2af8afe28481114323af3f99f82513d3261586da7517752899b407aec7f580000789f346b88c0902b983e55c3757195ad8f7d60c5fde447548e8377884a7f36a7b807e2b3d472e02c4492460dff3cf75283800a93555b39a242912874e", 0x9a}], 0x4, 0x0) write$selinux_access(r1, &(0x7f0000000400)={'system_u:object_r:hostname_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x58) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40014c0}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}}, 0x2004c840) 08:39:58 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getsockname(r2, 0x0, &(0x7f0000000140)) [ 565.609814] binder: BINDER_SET_CONTEXT_MGR already set [ 565.628564] binder: 16777:16782 ioctl 40046207 0 returned -16 [ 565.636080] binder: 16777:16782 unknown command 268591884 [ 565.642294] binder: 16777:16782 ioctl c0306201 200001c0 returned -22 08:39:58 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2880, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000380)=""/116) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r3 = socket$inet6(0xa, 0x806, 0x9) getpgrp(r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendfile(r2, r2, 0x0, 0x8800000) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x4) io_setup(0x0, 0x0) 08:39:58 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x80000000, &(0x7f00000000c0)={0xc, 0x0, 0x6}) [ 565.674330] binder: BINDER_SET_CONTEXT_MGR already set [ 565.679850] binder: 16777:16795 unknown command 268591884 [ 565.693095] binder: 16777:16782 ioctl 40046207 0 returned -16 08:39:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) open(&(0x7f0000000080)='./file0\x00', 0x402000, 0x17a) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 565.716534] binder: 16777:16795 ioctl c0306201 200001c0 returned -22 [ 565.734128] binder: undelivered death notification, 0000000000000000 [ 565.744913] binder: undelivered death notification, 0000000000000000 [ 565.759749] binder: undelivered death notification, 0000000000000000 [ 565.799461] binder: BINDER_SET_CONTEXT_MGR already set [ 565.805771] binder: 16811:16812 ioctl 40046207 0 returned -16 [ 565.817861] binder: BINDER_SET_CONTEXT_MGR already set [ 565.826155] binder: 16811:16812 ioctl 40046207 0 returned -16 [ 565.831515] binder: 16811:16814 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:39:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xfffffffffffffe86, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x7, &(0x7f0000000100)={&(0x7f0000000080)=""/48, 0x30}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:58 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x1, 0x0, 0x10000101) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) write$UHID_INPUT2(r1, &(0x7f0000000040), 0x6) [ 565.851402] binder: undelivered death notification, 0000000000000000 [ 565.939470] binder: 16824:16825 ioctl c0306201 200001c0 returned -14 [ 565.947943] binder: 16824:16826 ioctl c0306201 200001c0 returned -14 [ 565.956640] binder: undelivered death notification, 0000000000000000 [ 565.964654] binder: undelivered death notification, 0000000000000000 08:39:58 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000002c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbc3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb962}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4040) keyctl$read(0xb, r2, &(0x7f0000000140)=""/120, 0x78) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) clock_gettime(0x40000, &(0x7f0000001780)) 08:39:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x13) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="050005ef5f6b2a87fec53f439e7e0090b1cede907e2cbc410aa917d422beabc9b2fc4f2f7f3d9f07bf35b242f803000000000000ea278af30c"], 0x39) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 08:39:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) io_setup(0x9, &(0x7f0000000080)=0x0) io_destroy(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c4000000000b93b4c33dfa675abd9068f05eafb7cdfc986ee62ac75dedf101fc7310246a3ff17afdca08d759710a9ec2e46f40a7d80cd36f0d47c8beb71bec22917ddae6919a38cfc5814f60a0845f63de76f340e68e305beea9596a0fcedc2b28b2d637b25cd8ecb9c5a8d99d574a57d6f98e141ae"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:39:59 executing program 1: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x2f, 0x4, @thr={&(0x7f0000000100)="0aa4c8f385c9a0433b80eb3956ce13993dce64620e200161cd16440a0eac4e167eadadf4fe7784876c86777177b780aaee9b81ece93ea859120227cd3041d0320e6e31e21d98cb40b1fada45c2", 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000240)='syz1\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x200327da) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 08:39:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x244600, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000000c0)=""/109, &(0x7f0000000140)=0x6d) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) r5 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x2de, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc0100002300110325bd7000fedbdf2500000000200017000100000027bd700029bd700026bd70002bbd7000010000000800000008000c0006000000ac000700ff020000000000000000000000000001ff0100000000000000000000000000014e2000064e2300000200202000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="bf00000000000000d30b00000000000004000000000000000400000000000000000400000000000020000000000000000008000000000000220b0000000000008c0700000000000000000000000000000100000000000000ff0300000000000003000000ba6b6e0003010101000000000c001c00", @ANYRES32=0x0, @ANYBLOB="03000000ac000700fe800000000000000000000000000021fe8000000000000000000000000000aa4e2100084e2112520a0000202f000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="001000000000000000000100000000000200000000000000ff07000000000000ff7f00000400000002000000000000000600000000000000018000000000000001000000010000000700000000000000ff030000000000000101000000000000020102010000000008003592dee2b415e41ed2a81600feffffff1c00040003004e234e230000ac1e950c00000000000000000000000038a5017805e72ab68cb200080031cb96ada2297bf3edbc98f51ea1c50addf32a650424c6956c3398536ed08bbc99"], 0x1fc}}, 0x400000000080) 08:39:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x25) setsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f00000001c0)="604b055d0979d0094634eaea6652b27726d4b7e8031b7fd3d7a2d0bab9b463bb9ceb82cb361fab998cb281d36ab0cb55430778e811971412e442335d18ed19c81c2411f3ac86a186729491d6ac60f3ee3481d3c40febcc10fb", 0x59) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2001001, 0x0) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x5890, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x5890, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, 0x0) [ 566.453500] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 566.462937] binder: BINDER_SET_CONTEXT_MGR already set [ 566.466192] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 566.468389] binder: 16842:16845 ioctl 40046207 0 returned -16 08:39:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) epoll_create1(0xc000000000080003) 08:39:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @dev}, &(0x7f0000000100)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000017c0)=@broute={'broute\x00', 0x20, 0x4, 0x113, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x18b) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x81f7, 0x200) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x80000000000, 0x0, 0x982}], 0x18) [ 566.536306] binder: 16860:16863 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != ab75a6df334c3bb9 [ 566.560726] binder: 16860:16869 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != ab75a6df334c3bb9 08:39:59 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x103000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={r1}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xc0, r2, 0x80c, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb021}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32400000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7a3}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xef5f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002000001e8753b6"], 0x0, 0x0, 0x0}) [ 566.595626] binder: BINDER_SET_CONTEXT_MGR already set [ 566.601276] binder: 16842:16858 ioctl 40046207 0 returned -16 [ 566.609356] binder: undelivered death notification, 0000000000000000 [ 566.618988] binder: undelivered death notification, 0000000000000000 08:39:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x17, 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0x1}, 0x28, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x920, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630c400000005aacf0ae486d9d2b4dfbc666f80f00"], 0x0, 0x0, 0x0}) r3 = socket(0x11, 0xa, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="aa9b5783ee46305d726dce30c237a2b5", 0x10) io_setup(0x800, &(0x7f0000000400)=0x0) io_cancel(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f0000000440)="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", 0xfe, 0xfff, 0x0, 0x3, r1}, &(0x7f0000000580)) ftruncate(r0, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000280)={0x0, @speck128}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 566.680341] binder: BINDER_SET_CONTEXT_MGR already set [ 566.686102] binder: 16877:16878 ioctl 40046207 0 returned -16 [ 566.693314] binder: 16877:16878 unknown command 8192 [ 566.698582] binder: 16877:16878 ioctl c0306201 20008fd0 returned -22 [ 566.713505] binder: BINDER_SET_CONTEXT_MGR already set [ 566.718934] binder: 16877:16881 ioctl 40046207 0 returned -16 08:39:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0ce3"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:39:59 executing program 4: r0 = inotify_init() r1 = gettid() mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2011, r0, 0x0) r2 = gettid() tgkill(r1, r2, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x80000002) read(r0, 0x0, 0x0) getpgrp(r1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)=0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0xd) tgkill(r7, r8, 0x1d) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) [ 566.726285] binder: 16877:16878 unknown command 8192 [ 566.731940] binder: 16877:16878 ioctl c0306201 20008fd0 returned -22 [ 566.774170] binder: BINDER_SET_CONTEXT_MGR already set [ 566.794732] binder: BINDER_SET_CONTEXT_MGR already set [ 566.800568] binder: 16887:16890 ioctl 40046207 0 returned -16 [ 566.806939] binder: 16884:16885 ioctl 40046207 0 returned -16 [ 566.813391] binder: 16884:16892 unknown command 808464432 [ 566.814043] binder: 16887:16890 unknown command 58124 [ 566.824758] binder: 16887:16890 ioctl c0306201 200001c0 returned -22 [ 566.834280] binder: BINDER_SET_CONTEXT_MGR already set [ 566.839851] binder: 16887:16893 unknown command 58124 [ 566.845371] binder: 16887:16890 ioctl 40046207 0 returned -16 [ 566.851678] binder: 16887:16893 ioctl c0306201 200001c0 returned -22 [ 566.859212] binder: undelivered death notification, 0000000000000000 [ 566.867193] binder: undelivered death notification, 0000000000000000 [ 566.905169] binder: 16884:16885 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1509949440 [ 566.915147] binder: 16884:16892 ioctl c0306201 200001c0 returned -22 [ 566.923990] binder: 16884:16892 unknown command 808464432 [ 566.929687] binder: BINDER_SET_CONTEXT_MGR already set [ 566.935810] binder: 16884:16892 ioctl c0306201 200001c0 returned -22 [ 566.942626] binder: 16884:16885 ioctl 40046207 0 returned -16 [ 566.958369] binder: 16884:16892 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1509949440 08:40:02 executing program 5: r0 = inotify_init() sendfile(r0, r0, &(0x7f0000000000), 0x374d) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x220900, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 08:40:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000003c00020000000000950000000000000021edf8ff12200644ce093bcba4cdac66e66445ca5fe898c59a5322057367c8b2a7f3bbbefaf6bb5a384de5e7ac942552475790099ba212a4574cab953452dda32e8041f75122e9ff5ba9296edc52053ba5ce19415636b05383379dd7a99c14ade413982b4d5e761e46877c304a2c24760007ce9fcfbfa9b6"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 08:40:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f631a4000000000"], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400)="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", 0xff, r0}, 0x68) 08:40:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = fcntl$dupfd(r1, 0x0, r0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r4 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r4) keyctl$describe(0x6, r2, &(0x7f0000000300)=""/236, 0xec) 08:40:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_buf(r1, 0x6, 0xf, &(0x7f0000000100)="c7f24d4aa1f63cee06715fa3e651323eedf36bddbb84be24e6594f5461c306e54a456a0581ec4503483e79299153ceec004f69e9baf0efd6474e80c7cc9557dfa9f86f0c741566e6f9d4e7ffcb3adf388329425a60b9510f8a24d59327569297fd24f0902a09f71380392005a732dc53e480d0bf527dec45a16d016a05b142f427c640445b0f", 0x86) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:02 executing program 1: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x2f, 0x4, @thr={&(0x7f0000000100)="0aa4c8f385c9a0433b80eb3956ce13993dce64620e200161cd16440a0eac4e167eadadf4fe7784876c86777177b780aaee9b81ece93ea859120227cd3041d0320e6e31e21d98cb40b1fada45c2", 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000240)='syz1\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x200327da) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 08:40:02 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0xfffffffffffffffe) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={&(0x7f0000000380)='./file0/file0\x00'}, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22}, {0x2, 0x4e1f, @loopback}, {0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x17d, 0x8, 0x5, 0x46a, 0x5, 0x0, 0x0, 0x1}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x5d) sendmmsg(r0, &(0x7f0000000500), 0x0, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000a40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000880)=0x2dc) setxattr$security_capability(&(0x7f0000000a80)='./file0/file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000800)=@v3={0x3000000, [{0x1, 0x5}, {0xfffffffffffffffe, 0x6}], r5}, 0xffffffffffffff26, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000c00)={'filter\x00'}, &(0x7f0000000480)=0x78) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000780)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000180)=0x1ff) timer_create(0x3, &(0x7f0000000840)={0x0, 0x100029, 0x1, @tid=r6}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f00000002c0)={{0x77359400}, {r8, r9+30000000}}, &(0x7f0000000300)) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000006c0)=""/36) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00003a3000/0x3000)=nil, 0x3000, 0x0) fchdir(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 08:40:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x2000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x100) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0xfffffffffffffffc, 0x0, @ipv4={[], [], @empty}}}, {{0xa, 0x0, 0x4, @empty}}}, 0x108) openat$uinput(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uinput\x00', 0x802, 0x0) io_setup(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x80000000006) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000200)={0xfffffffffffffffd, 0xfff}) write$UHID_INPUT(r3, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0xf2) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='security', 0xfffffffffffffff8) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000003c0)) [ 569.480606] binder: BINDER_SET_CONTEXT_MGR already set [ 569.495867] binder: 16910:16913 ioctl 40046207 0 returned -16 [ 569.504825] binder: 16910:16913 unknown command 1075471119 [ 569.515829] binder: 16910:16913 ioctl c0306201 20008fd0 returned -22 08:40:02 executing program 4: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) dup2(r1, r0) [ 569.547715] binder: BINDER_SET_CONTEXT_MGR already set [ 569.560674] binder: 16910:16913 ioctl 40046207 0 returned -16 [ 569.563665] binder: 16910:16926 unknown command 1075471119 [ 569.612614] binder: 16910:16926 ioctl c0306201 20008fd0 returned -22 08:40:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000002c0)=""/76) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d8fab3bb2526066d5ffa485f07952ab405df497932a647bee70f654e84191e204c5531d9c6b599eebe314c725360cfbc5d761eb0be14e38ad77ee1f9a9547263900fd8670bd353d312519a46fe185bdd91fff2856d724393dc20c11accba152817f84ddf7e21d7434ee17da422970ff4b4a6c60b04ed827d3c2a6d8289e67a3034c8c1f61ba0f123ce3ebe4811"], 0x0, 0x0, 0x0}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000240)={0xe, 0xfc7, 0x55e2}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x80, 0x1081}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 569.655673] binder: 16922:16931 unknown command 0 [ 569.704591] binder: BINDER_SET_CONTEXT_MGR already set [ 569.723503] binder: 16938:16940 ioctl 40046207 0 returned -16 08:40:02 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) gettid() pipe2(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_UIE_ON(r1, 0x7003) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="22ae1b179ca83213139df0a560aec0fefdca1065f628ab5361a9aec44b8c8a172ddfc83315cb861e79375ee3f02bfec935174b9b621a845c985b11f239b0afb0d7f9108013d5110d667ba02ca03899350d5f527b25fad799ab3700c3f54dc8ac0b8a662f2fa4e6f32884f41c83e1d2abffd31f4be07f8f2b95db133c8e754e8b00776ce4cebacdc30800549098b0ab52d805e5577021ebcd8dbd0d024adb773a8cf2efd12971274a53b449dced2550c89ea29ef9cc775e395e349045b9349423309e6ee7ff6202f677fa01847b2a3834838e028ce3d53283665d4f19435690894a29a18bfc4415c478a2e2a798238c231a", 0xf1}], 0x1}, 0x4) r3 = socket$inet(0x10, 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0x5) r4 = gettid() r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="06780c5e74569d0886fa4e5c809cbd", 0xf, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, 0x0, 0xfffffffffffffeb7, r5) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2}) socketpair(0x1, 0x80007, 0xad, &(0x7f0000000140)={0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000880)={&(0x7f0000000840)='./file0\x00', r2}, 0x10) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f00000003c0)={0x100000001, 0xffffffff, 0xdd4, 0x4}, 0x10) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f00000006c0)={0x1f, 0x8, 0x80, 0x7}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ifreq(r7, 0x8937, &(0x7f0000000640)={'lapb0\x00', @ifru_data=&(0x7f0000000600)="68cb0dd590171b71d733b470168c81f32bcc76fc753e469def296f3ff61e57f5"}) fsetxattr$security_capability(r7, &(0x7f0000000740)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0xfffffffffffffffa}, {0x93, 0xfffffffffffffffb}], r9}, 0xffffffffffffffdb, 0x0) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0x3f, 0x20, 0x40, 0x7, 0x0, 0x1, 0x91160b6edceee2d8, 0x0, 0x4, 0x9, 0x3, 0x36e5eecc, 0x5c6, 0x1, 0x9, 0x200, 0x40, 0x5, 0xfff, 0x2, 0xb, 0xfff, 0x4, 0x20, 0x7, 0xf5, 0xfff, 0x1ff, 0x200000000000000, 0x8, 0xff, 0x4, 0x81, 0x2, 0x7, 0x33a, 0x0, 0x80, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x78}, 0x400, 0x1477, 0x5, 0xf, 0x1000, 0x3, 0x80000001}, r4, 0x9, r1, 0x8) keyctl$unlink(0x9, r10, 0xfffffffffffffffd) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000400)=""/12, &(0x7f0000000480)=0xc) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) fsetxattr(r8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x1) [ 569.748369] binder: 16938:16940 unknown command -1145832744 [ 569.767192] binder: 16938:16940 ioctl c0306201 200001c0 returned -22 [ 569.833751] binder: BINDER_SET_CONTEXT_MGR already set [ 569.833871] binder: 16938:16944 unknown command -1145832744 [ 569.839096] binder: 16938:16940 ioctl 40046207 0 returned -16 08:40:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x100150, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5c, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x18, 0x48, &(0x7f0000000100)=[@flat={0x0, 0x100, r2, 0x4}], &(0x7f0000000140)=[0x28, 0x38, 0x30, 0x18, 0x78, 0x40, 0x38, 0x0, 0x18]}}, @acquire={0x40046305, 0x3}, @dead_binder_done, @register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f630c50b7d238512e5070e6ad08000000"], 0x0, 0x0, 0x0}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00', r3}, 0x10) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) [ 569.877521] binder: 16938:16944 ioctl c0306201 200001c0 returned -22 [ 569.885837] binder: undelivered death notification, 0000000000000000 [ 569.894959] binder: undelivered death notification, 0000000000000000 [ 569.956014] binder: BINDER_SET_CONTEXT_MGR already set [ 569.980968] binder: 16950:16951 ioctl 40046207 0 returned -16 [ 570.016505] binder: 16950:16951 got reply transaction with no transaction stack [ 570.030613] binder: 16950:16951 transaction failed 29201/-71, size 24-72 line 2920 [ 570.061070] binder: undelivered TRANSACTION_ERROR: 29201 [ 570.067292] binder: BINDER_SET_CONTEXT_MGR already set [ 570.080223] binder: 16950:16956 got reply transaction with no transaction stack [ 570.087732] binder: 16950:16956 transaction failed 29201/-71, size 24-72 line 2920 [ 570.095873] binder: 16950:16951 ioctl 40046207 0 returned -16 [ 570.118181] binder: 16950:16951 unknown command 1342989071 [ 570.123895] binder: 16950:16951 ioctl c0306201 20008fd0 returned -22 [ 570.140210] binder: undelivered TRANSACTION_ERROR: 29201 08:40:03 executing program 4: clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000340)=ANY=[@ANYPTR], 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000000c0)=""/191) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) 08:40:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) write$P9_RCLUNK(r2, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r3 = dup2(r1, r1) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000100)=""/149) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000e40)='ext3\x00', &(0x7f0000000e80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "d06f883d859e5b21e6006e5b1fe913af7ec8acd1"}, 0x15, 0x3) 08:40:03 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000e20000000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x20, {{0xa, 0x4e22, 0x3, @empty}}, {{0xa, 0x4e22, 0x0, @mcast1, 0xdb2c}}}, 0x108) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='memory.stat\x00', 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='gid_map\x00') r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)) fstat(r1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000a80)) getegid() lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="907a0dc4216651ae5989bdbaa044564142141673ff49c72a792c0185328a2fcd5a703a2e3cc46f895690da41ef76a5200a4abdf4f36ad429a4106e9c42f603061b84270527db91bb672409ca1017d03d7c8a5c3496cce1b1ca821278ba6baa8d04da4f7a6499904f92753eea515783bd08e55080bcd2fe8d6ea8842d9a369a998b8ae6f1ec4104e2bf71d5e12a8149ec1a06126ccf12de3451f8"], 0x1, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x345, 0x0, 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000880)={0x4}) syz_open_procfs(0x0, &(0x7f00000008c0)='gid_map\x00') mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f000000a000)) [ 570.311172] binder: BINDER_SET_CONTEXT_MGR already set [ 570.330241] binder: 16961:16965 ioctl 40046207 0 returned -16 [ 570.337523] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 570.341220] binder: 16961:16965 ioctl 80084502 20000100 returned -22 [ 570.354871] SELinux: failed to load policy [ 570.362400] binder: undelivered death notification, 0000000000000000 [ 570.385126] binder: BINDER_SET_CONTEXT_MGR already set [ 570.391484] binder: 16961:16965 ioctl 40046207 0 returned -16 [ 570.398687] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 570.399444] binder: 16922:16977 unknown command 0 [ 570.413092] binder: 16922:16977 ioctl c0306201 200001c0 returned -22 [ 570.421035] binder: 16961:16971 ioctl 80084502 20000100 returned -22 [ 570.428295] binder: undelivered death notification, 0000000000000000 [ 570.430162] SELinux: failed to load policy 08:40:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) 08:40:03 executing program 1: sched_setattr(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) [ 570.488478] binder: undelivered death notification, 0000000000000000 [ 570.495750] binder: 16922:16931 ioctl c0306201 200001c0 returned -22 [ 570.503675] binder: undelivered death notification, 0000000000000000 [ 570.529956] binder: BINDER_SET_CONTEXT_MGR already set [ 570.535604] binder: 16983:16985 ioctl 40046207 0 returned -16 [ 570.543148] binder: undelivered death notification, 0000000000000000 [ 570.551588] binder: BINDER_SET_CONTEXT_MGR already set [ 570.557061] binder: 16983:16987 ioctl 40046207 0 returned -16 [ 570.564514] binder: undelivered death notification, 0000000000000000 08:40:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') 08:40:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="486351a1306aacc6361da4bfe198b2f51b87727679c367b7776f4d9c4c216870116aa9efa550695fbcc13007ff48a06c7e83b16cf7ad05f85e1278b4f3419582e51b3496ef4c68aa3c2033a21bb843a496c2311c9e901cde3b367142ef15bc2054f875febce9a55f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4101, 0x100) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000001cc0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000001d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000005200100826bd7000fcdbdf251c0800060004000000080006000500000008000100", @ANYRES32=r1, @ANYBLOB="100010c95ec62c102a240cf09834ee17e54897f8f2df063b0ea5297f17903e5024a47462efad89d36532134f8252dbf9e73c00000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010003b0e000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="430200000000000008000a009b6d1bc2b991c82a4c99f8d79a44f3b70a28bfa165ff03da775e24e1afd0bb21bbefca2f7cf83010f34baedd61687a552bfa5122bf45266db49ea8bdb77b2a326cd2777caab3c0810028f20e5a31289f3d4c45131587ce1f58bd712e8f4214f13f7f6c3383164aac215afa8d7b278357c8b56f4a079b02b14cc757dfcf99c7917feb309612b85fb6cdb985904d092c165457c1b63b15cba346600051a0cc7effc038aeee0950428499e1b1b27548", @ANYRES32=0x6, @ANYBLOB="1800120008000100767469000c00020008000400e0000002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_bond\x00'}) 08:40:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESOCT=r0]], 0xfffffffffffffe3a, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f5453d0776f4498b"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:03 executing program 4: syz_open_dev$sndtimer(0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/\x00', 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) pipe2(0x0, 0x800) r2 = dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0/\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) exit(0x3f) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x141003, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r3) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x33, 0x2}, 0x7) mount(0x0, &(0x7f0000000480)='./file0/\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/', 0x0) mount(0x0, &(0x7f0000000100)='./file0/\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x2642a) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000003c0)={0x400, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) dup3(r0, 0xffffffffffffffff, 0x80000) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x80, 0x0) exit(0x6) 08:40:03 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d0000000a00001f01000000fc0002c9130001000000000050", 0x25}], 0x1}, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000001c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@mcast1, 0x69, r2}) r3 = socket$inet(0x10, 0x2000000000000003, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00\x00\x00\x00\x00r\xed\x02\x00', @ifru_flags=0x2}) 08:40:03 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x808031, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x3, 0x1, {0x57, 0x401, 0x5, {0x27, 0x3}, {0x3ff, 0x80000001}, @period={0x0, 0x1, 0x20, 0x3f, 0x8, {0xfffffffffffeffff, 0x2, 0x1, 0x80000000}, 0x3, &(0x7f0000000000)=[0x3ee5b269, 0xdae3, 0x9]}}, {0x57, 0x0, 0x4, {0x5, 0x2}, {0x4, 0x6}, @cond=[{0x9, 0x4, 0x9, 0x8000, 0x7fff, 0xdd2}, {0x0, 0x7, 0xfffffffffffffbcd, 0x0, 0x7, 0x20}]}}) 08:40:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x1002) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$keychord(0xffffffffffffff9c, 0x0, 0x101000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r2) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = getuid() arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) set_tid_address(&(0x7f00000002c0)) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) inotify_add_watch(0xffffffffffffffff, 0x0, 0x3000000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) sched_setscheduler(r6, 0x7, &(0x7f0000000300)=0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$BLKPG(r5, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000340)=r6) sendto$inet(r3, &(0x7f0000000180)="a46ef51a81fc732fd9ab70e594dba1c83f78cf8a38a516f2ecdd06387b175b615232b1", 0x23, 0x0, 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x3275, 0x0, 0x1f, 0x1, 0x16, 0x1, 0x3, 0x7f, 0x6, 0x8}) setfsuid(r4) setresuid(0x0, 0x0, r4) keyctl$get_security(0x11, 0x0, &(0x7f0000000000)=""/3, 0x3) write$evdev(r0, 0x0, 0x0) 08:40:03 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000004080)='./file0\x00', 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000040c0)={'IDLETIMER\x00'}, &(0x7f0000004100)=0x1e) chroot(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000004500), 0xe92bd5d83901ac, 0x0) ioctl$sock_proto_private(r2, 0x89e7, 0x0) wait4(0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$poke(0x4, 0x0, 0x0, 0x0) fstatfs(r3, &(0x7f0000000040)=""/185) execveat(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000140)='IDLETIMER\x00', &(0x7f0000000180)='IDLETIMER\x00', &(0x7f00000001c0)='!md5sum{\\%$systemvboxnet1\x00'], &(0x7f0000000280)=[&(0x7f0000000240)='-\x00'], 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 571.006700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 571.014660] binder: 17008:17009 unknown command -1588501688 [ 571.030629] binder: BINDER_SET_CONTEXT_MGR already set [ 571.046179] binder: 16999:17003 ioctl 40046207 0 returned -16 08:40:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x400, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x4, 0x6, 0x7, 0x7, 0x0, 0x6, 0x80, 0xc, 0x9, 0x4, 0x7, 0x23a4, 0x0, 0x3, 0x2, 0x7, 0x4, 0x1, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x2, 0x9, 0x3, 0x1, 0x6, 0x401, 0x8000, 0x1, 0x100000000, 0x8, 0x4, 0x2, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x80000001, 0x0, 0x3ff, 0x7, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xc21fdb4a762e9053) ftruncate(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffefffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r2 = dup(r1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000000)={0x0, 0x2}) getdents64(r3, 0x0, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000300)={0x1, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}}, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)=""/9, 0x9) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x2}, 0x28, 0x3) close(r5) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 571.067153] binder: 16999:17003 unknown command 536871040 [ 571.085571] binder: 16999:17003 ioctl c0306201 200001c0 returned -22 [ 571.109596] binder: 16999:17003 unknown command 121456117 [ 571.117980] binder: 16999:17003 ioctl c0306201 20008fd0 returned -22 [ 571.136563] binder: BINDER_SET_CONTEXT_MGR already set [ 571.143271] binder: 16999:17029 unknown command 536871040 [ 571.151557] binder: 16999:17003 ioctl 40046207 0 returned -16 08:40:03 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 08:40:03 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4400, 0x0) sendfile(r1, r2, 0x0, 0x666f) 08:40:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000500)={0x10, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = dup3(r1, r0, 0x80000) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000000c0)) r3 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c000000fc005f655b"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x5) [ 571.163099] binder: 16999:17029 ioctl c0306201 200001c0 returned -22 [ 571.185172] binder: 16999:17003 unknown command 121456117 [ 571.193255] binder: 16999:17003 ioctl c0306201 20008fd0 returned -22 [ 571.249384] binder: 17008:17009 ioctl c0306201 200001c0 returned -22 [ 571.257972] binder: 17008:17018 unknown command -1588501688 [ 571.266515] binder: 17008:17018 ioctl c0306201 200001c0 returned -22 [ 571.279305] binder: undelivered death notification, 0000000000000000 [ 571.287802] binder: 17042:17043 ioctl 80247009 200000c0 returned -22 08:40:04 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x4}) r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304400000003841f6cc197a7aa06d600b4929000e630c4000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) fsetxattr(r0, &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)='vmnet0[\x00', 0x8, 0x2) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) 08:40:04 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x0, [], [{0xfffffffffffffffc, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x2}], [[], [], [], [], [], [], []]}) [ 571.290152] binder: undelivered death notification, 0000000000000000 [ 571.304359] binder: BINDER_SET_CONTEXT_MGR already set [ 571.322017] binder: 17042:17043 ioctl 40046207 0 returned -16 [ 571.334163] binder: 17042:17043 unknown command 811791 [ 571.339598] binder: 17042:17043 ioctl c0306201 20008fd0 returned -22 08:40:04 executing program 1: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7) [ 571.368074] binder: 17051:17052 Acquire 1 refcount change on invalid ref 939524096 ret -22 [ 571.376931] binder: 17051:17052 unknown command 432862785 [ 571.384239] binder: 17051:17052 ioctl c0306201 20000000 returned -22 [ 571.385467] binder: 17042:17050 ioctl 80247009 200000c0 returned -22 [ 571.404378] binder: BINDER_SET_CONTEXT_MGR already set [ 571.410013] binder: 17042:17050 ioctl 40046207 0 returned -16 [ 571.416814] binder: 17042:17043 unknown command 811791 [ 571.422633] binder: 17042:17043 ioctl c0306201 20008fd0 returned -22 [ 571.426404] binder: 17051:17052 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 571.457759] binder: 17051:17058 Acquire 1 refcount change on invalid ref 939524096 ret -22 [ 571.467115] binder: 17051:17058 unknown command 432862785 [ 571.473473] binder: 17051:17058 ioctl c0306201 20000000 returned -22 [ 571.480297] binder: 17051:17052 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:04 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x8002, 0x4}, 0x2c) clock_getres(0x0, &(0x7f0000000040)) fcntl$setpipe(r0, 0x407, 0x100000000) 08:40:04 executing program 1: pipe(&(0x7f0000bbc000)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000000040)={0x7fffffff}, 0x0, 0x8) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x800000141042, 0x0) fallocate(r2, 0x0, 0xffff, 0x400) sendfile(r1, r2, 0x0, 0x20000) dup2(r2, r0) write(r2, &(0x7f0000000080)=' ', 0x1) fcntl$setlease(r0, 0x400, 0x0) 08:40:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000100)=0x3) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xc9d1) 08:40:04 executing program 5: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000040)='md5sum[cgroup[userem1*\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/packet\x00') write$P9_RLOCK(r2, &(0x7f0000000200)={0x8, 0x35, 0x1, 0x3}, 0x8) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xffff, 0x9, 0x81, 0x3ff, 0x0, 0x1, 0xc440, 0x8, 0x40, 0xaa, 0x80000001, 0x4, 0x19, 0x9, 0x0, 0x516b, 0x1, 0x14, 0x3ff, 0x20, 0x1f, 0x2, 0x7, 0x163, 0x7, 0x2, 0x400, 0x1, 0x43, 0x0, 0xffffffff, 0x522fc950, 0x6, 0x101, 0x0, 0x800, 0x0, 0xbc2, 0x5, @perf_bp={&(0x7f0000000000), 0x4}, 0x400, 0xffffffff00000001, 0x96, 0x0, 0x1, 0xfc03}, r1, 0x5, r0, 0x1) write$selinux_access(r0, &(0x7f00000000c0)={'/sbin/dhclient', 0x20, '/usr/sbin/cups-browsed'}, 0x3b) 08:40:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) eventfd(0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x40000000003, 0x300) write$UHID_INPUT(r1, &(0x7f00000006c0)={0x8, "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", 0x1000}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x1}, 0xfffffffffffffc60) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2001, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f0000000180)="96b159cda8604e7beeff64fb036bf37290be4889cb1881ebf54b03b57ab93d76a0dfb9609aaaa8aaef50c1ca8a547de9d4ee22317f3ea5ff55f3b80f3364d9d460e7ceb076fe21287e19821bbd4da66e86fda3c500f8ca44200d7602cced9e4da804039d"}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') utimes(0x0, &(0x7f0000000540)={{0x0, 0x2710}, {0x0, 0x2710}}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000080)='net/unix\x00') setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000005c0)="020400006e00600000000000fff55b4202938207d9fb3780398d5375000006007929301ee616d5c01843e06590080053c0e385472da7222a2bb40100000042914c5e61eaa96fa9a1e8d1843e770afd6e9ef5837dbdeba97bc406eb04035ba1c331954421fe368d6376aa49676e68994664af1afe5e55c76fba4bf3a6bbaff7ae16f755d93a191988de36844a001fa3ba60b8815dd3c11ae64e27f8b4e448e679bb393e96cbf820e99b9f258402ce9331b754d78b47ea6aae382a7de3fdde676e6f52cd4f0024d8ae3b9c6b84dee78734cdbc", 0xd2, 0x47ffe, 0x0, 0x0) 08:40:04 executing program 5: r0 = socket(0xa, 0x802, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x3) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x10000, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xfffffffffffffff8}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000000c0)=0x6ff20914, 0x4) [ 571.998960] binder: BINDER_SET_CONTEXT_MGR already set [ 572.005576] binder: 17068:17073 ioctl 40046207 0 returned -16 [ 572.012185] binder: 17068:17073 unknown command 0 [ 572.017005] binder: undelivered death notification, 0000000000000000 [ 572.017366] binder: 17068:17073 ioctl c0306201 20008fd0 returned -22 08:40:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="c5000000220000001f000000000000009500000000000000"], &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x84000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000280)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x0, 0xffff, 0x147, 0x4, 0x7}, @call={0x85, 0x0, 0x0, 0x4e}, @map={0x18, 0x3, 0x1, 0x0, r1}]}, &(0x7f0000000140)='GPL\x00', 0x400, 0x34, &(0x7f0000000180)=""/52, 0x41f00, 0x1, [], r3, 0x5}, 0x48) 08:40:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r2, &(0x7f0000000100), &(0x7f0000000140)=0x1c) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c080090802caaff9e22b650e314456d4263"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x7, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440000000168a9d34000e630840"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:04 executing program 4: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x348a, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) [ 572.062424] binder: BINDER_SET_CONTEXT_MGR already set [ 572.067280] binder: 17068:17089 unknown command 0 [ 572.067818] binder: 17068:17073 ioctl 40046207 0 returned -16 [ 572.075467] binder: 17068:17089 ioctl c0306201 20008fd0 returned -22 08:40:04 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0x6, 0x9, 0xaea}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000100)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000280)=0x2, 0x4) getdents(r3, &(0x7f0000000780)=""/4096, 0x1000) getdents(r3, 0x0, 0x0) write(r2, &(0x7f00000000c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000002c0)=0x3, 0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000001780)={0x8, "eb1869cb2dfa91e6c6188b22291c4d48b5ce33d8dfa464af1ef7d353d86fc6b848eb5810b727916b7d77f801fbffa29810d95e3262ff296908e234b57d38644c2257ca946f2282be4600078e783ae58851ce442d30b93d9f8bde2c8fc5aa8c7270618b2dfd77ad0e510c2423dcf852420302ffa0a076c70282626e9f0a0056f4c8a16617af1bfbb947d78769c804e26d6fbe84070cc356c70e5d55e9331ec77561fdb74e57ed7100276540ce9508c83097f5dc9e2f7050e174e2920c558bdfabfa3c8c1164073f4b3a8df60f3d2d3addd729e8e091f9db620d5bef14da5d1409d17a55afedcb3e199253fc3d93adc060a998c0a875b60af2c08b0a55c831457b1b5c4e235e04c70b59fcd521774573eae656d98ab8166747837fac04074797186cdf1bd78d2e7f52a3d3bb000fcb968f188e63693b0ae7fc21ad9ca64413f8731164b4064d31a35d4816915b63497b90c29cb424b78684f48972d802f4db2910843eae313a916ad00afbf013e430b443bd3ee53c7a704b119f8a61a98718930a39a0e2ebf1b7934f2c6ef648a359f613515ee757519d89ee5da68e9b8af424ef7713f1427f103758ef398d729f1923e23f03267da3d3c9bac075f5048b293a0e9192c0f71306df6da07f84e4f6c2c271721b93037fb39d1ec59f9fcbb65d693361dba9ac9cd351f09f42ce41f6f72869d12a03a0d692422fd842471b6da480fc2824a31119ca61289789a110fd5088a3da31a95dbfe70d4cc20e7b1f84a5281ecbd49c730ea870a3fdf86fd31578ac044df6589649ced5ebd2eed5ecaab58ed07ede114480973651855ce2e74a6ff4c0ad816b3f31714b13bb8a24dfb7551a66a92b68e11e486c4a0d1594021e4223dfdeb7178ed69e4088c7de4ec983aae9fc2e164f9c630cdcc989988c5da92ab0a4e497d245ea1b209c326024738108a5186a1cf25679d45bd0ee653507d6707d75bdbc4122fbbdb0c3371bc8531d2b8b9343ca3123f550e11ac6e599d2fcde6c3d119133606dda0962d00f1e8fe44cb68a12d933431e7a6de4f64d0968d099cbd9f1e5e2b570f29a604df42b0260be6d8a6689795b8e489369951911dc2435d417f105c2d38169acd50b2996f69bdcfb83e066420d64ff3247dab91eb94cbe820047b3b52e6cea0a7effed0c4a302a817e7fa3a5466288e8683ecf2c68996b1638683f8786fa8b8af6dc90b1aa1990eb101cfca4c944f97ca50f90ac9b252a4000bd83b521f78690efcab9199b4ab65a90befa8ea4bd55f1e45c83df5e95193a028b927f8aa74a08fe76263ed170a19dc208999e1f778e7969b3c3bc88bdfc9868b51e40aaddfec9e542c7672ae3ff8001b36cee7bb3658dbbbe282fac84d16f49d22906ab94406281a5288f20eb90e9a5ddf47c2517002a35d1c658c2e8da5f08e9fa3084e0a769ca8b84e8945cf48843ece32862c5a84b8a99db66cb1c83a0ac8d8d061c2e570353df8b1d9d065e4465aab2fcd6d961d74d55900d8cb95e4d6e9e7469c2c1021df8e77984d416b6f1e3dbf05f5101bedaaac0ce2f0342599353a882447cd8a5b8c0ab86eb990c1a673e5c0b50a0515cb321807da1affaa134c541c55964b052453fb38ab030404d490bd559f6c4c968298de73a8c2f13f6bba8861790d8739341c4d2316f891324eab8e19cd60022dd9c8e5a580e894164614b4373d9cf91c2a134f4d7a273ded86341931d005ef24949d6fad6ca856c07de5fb8cbfbc419f4ee54990df2b3576dcd9e5f21c56ab77109ec193286384a9b34ce3db0396641389d5c95f53ad9ca8ef3ca24db51aa593b77582fc18cbf04da6946ff2d052320766b83a6612e83f6a817e476beb1fb6d1072ca39785e197b739c55f7de1269b1e2c3a75c741ff2d86fe96048d1b7873d2ee61345f0e1556ee28fe3c9bea6d0449c1e289eecd08fc1afe4fadd21ddd2c46c0f4ed9bc6310cfe13259431fdfd109fd32bf4b16743d8bf624142b84d3be63e3991ff8d244fcefc24d90bf8b8763afd4e7297bf484bd5995753a4c2c5df2615bfb7f93fe9a09f5295c52f76823d08bacd4791e0c0327192c757e47e83d1dc90d68b1c5a072c79e1ed920c4493ef8e4833914901472153cc6979c59476fb81a0ad84ad7786c87cd916f5830dfac6cb5c06f80125803f6d9e75d3d67dbd0b0f5bba2501f517df7d663f6a8e964862ea92221ba2097eb6fbe85db1db3eea9b989ad312aacd60eb25566f1ea0d7d6a453cd09118f2c89849aa65187a4973032a6adb17946eb43708cd3777d35b7956982fa7f972982e853e49f6257cc6f1206c788f27b80405b7ec13615b7188e43e0b2ac8c0eed9f7596a6e1347dd0b40f5b832e14a884f58a22d9cd965c389954794c080dc81997da75ab3e1a529811fdc89228a7ea7f7aaf7c616ede91dbc90a83697191ca7057f98a7245d68b85e4708742d3fcd54f7c0bbfec94df1b643a14cee6f0e4d1c3b75d0b315e72aae79bb0e08610e11214e1d44860bf76f1eb4e91fe34c5bceab7c47027fabb74a50f507dfce4a514fcad921e1445b3b33a1b140ab617397f09627c2c55bd039a58ac6e9c37978f3f91b90eb1c57769ce494e8aeb2c2ad7802cb389e89651f2304510cd2e722b746bdab4a7800e3e4de33562a82d944630738ad8aa88e0296c0029caeac24afd3a700283324ed8a18b33d25aacc1440e2e313ce193289ad952b46d23039dfac1b9c92f9673811d5dd0b683ebb1ea9a69bf688a7fc6e4b7b9d8539ae94411c84c3a79422717bd2153d42c46fe727ef202541b21c93c73ab975fae8c63f99636da2a667f663688f678857b6acd83d1912715ffe196b6bfd47f5ed621d3a1660afd2092e45ee7f72c0756278ea39011fbddc48378c15d3da9e1b8131bb4a11dc803e47db62a91651f8a9080a41b818d76b7a1eca6ed6dc48fa71d0b97b89ee5e746fdb48b5369a8a637aa9596ad404e2a7fcb10789300300591e0e393edc5867cdcd86c3d943a42556f78f7b3530b83f9ce327c7d0034e6fdacb421b9a31fa32cfff055858ff07a064658d68eb0034dacdd2f56120c01e94ac0ff4d0f01353859eee140ebfa428e5de148615534f9b7f1c7dadb485c20081bb3af585b2b1be481482b28bf65b347718b315589527ebd94c2cbc1a2d50f7b91c0c62bf8a60089467b04df9b6214ab44d1bd16c70aa7ea58d35639541edbdd2fe7bcf34c2eccdf64cf3bce74d720e9999205ab0ebb281ab2130ae8ac8c395da25a11b8cfa09168b41475aef2e370d99f18b059eed4cf347749a5befe0e242bd765512c16889c18c05aa4873c12e92db11486386fd1cd5ddce83bcf7842b074d9f4ba457d326e30d43b60dd256a674890c508d2ded28fb3bb3299c313f214624d10e41e0713c108789ee32f1a0f1e593ca16fee3ccdbdd5ba566f09b7f1bc463709e0b182ed4c3ae53c1cb10f20cdd760b49f489b99fc6163316f0df465d2e8e040118d8222636bd36633a58fffec3e3659a6d4baf348b03ac1bbb60159eea360ed8b5b107414b9aadf42ce54d523e81d2cf498769567549764bc31b12e9aaf8497861a39da98a2ac12ac85cfc7afe92b009e30defe0967491427c63e4bcbd89361f5a08452ccf066ec8c4d1fc4395ab1868658a7322f937b082fa7683f671c70fec74ccde87af60ea1a0251524971a946cd0bbf99a6a2d3fe65a862df2d2bd9d0ffaa80c1147d84afd7b102e5049ec7c302c38e91d545a0e98bed99e8298112a58d814977ff047c7afb04fedb56723eced918839989147b02a8b9a0c87d39e0049bcf796cbb3951cb81aea5d21aa528dd19f875ec33b76baa04c95541f60c36941a823265120793e3bad9ca22eb828585947d4d09db65d3a05d2a0a5c4d6d9daea8b6087daa675a03b17313601d3f4f9c9b41a0b23c1c196da2564da56ce6ea90c6a03a9bbddc13378a5982bf3ace890dd08eb5f23929a7a76ede4d1ffdfbb9cca58f96beae29aaf644cd72bf1934d63c4c78ef3030051c322be2f122f3fcb2b87a28f0eb7bb660e7fe7bb198ceabbee2e059e5775c2d3d964db0443e0f1c6f241502cdac669ceec7bb4cf6d4edc6c4f92bb0963343bf9eb45e6179c57bdec469df8ebe98a86086e8437b1cd1f5c3739eab2c6f956b467816d5eae5e11d13e893e09a810c5a1619254b1c7bce5a594b286722cd96429807d4877832d1d96845748271cc9bcf40fa21b7d71ffcb57f19862247705a614dbabc7feb19eb690f5393c774ee891962efc2d34ecbfb42e138b4ad8c82e35a060dc0f34cf32e2480afeda7b36f7576ea6fda39b2495982e2f23385505ad961d3102a2869a0dfeec8d38a25a8b0db29f75f0ae1c7de4be2e061543af13eca4ab2d5c6b1a4e211a94f42aff2fd80307bcbb2105f1130446074ce810202914760c52dacab198d9b43c7f4374484f78f0286ef675eaaadbe3da2cd790823f2ae43da2e31431f31b39177fde35434f6c2024a2e66792f5ebd5b27f72cce6a02e091df1108e3baff1342bcd26013770af745cc319319273d2f52c75ab69fa03327af2e157eceadfba8f934294bd3e8e3e113c647df868a5e3670a12b48371103a1e1702a850f51bf497ec825a6086bbf705fddc8b6c17ec76f5ea8dd2cab4a0d789d9564987b7317493522e5d38427f83e1dacd18e6f991e0dd44d5ec9e51da0a32ce29574a38ef33f66b8770cb6b7b56ce0f5b7ca04f28c8b62734e670873b18b41fd98bc35ec242cb9808f090a436fe932a4b5863ac504ff50f8ecddf092b0bc4d95395466acb69c2a4b0595223c9d4f2474fcb7062dd9c869cdd4c4c5f97731b8a92e5e46acc9aab9f76f72089ee2a0d8eed172feb6de4ae768b4495b436427c81e7c5a496b5151b90ddf7155be557e96f2c60f839553cebe019fb3b9f8ee672582637e445d664d4cc2ec6fb86d4c99c49ef6d0cbc481e96fbd2e54fc691b27a1b17ba6410050da15340a0ad7f6aaab0167596d012c22b50cf166d0d278012ab7d8f49ea1a65fe483473cbec72c56688fb7baafb4f64172a2814b4df651bd3ad625815907a26bf8751ac1e13bb1b970e327034c4cc38ba9bf7f3f9954271216ba9bb136b61ddef69ab60715dcf6fdcbee31bf6b0b00e8660df1343d958d27c9ef3f65a9d32ef4298000e693915f0827a7bd6f7207af05397f1d7e8ae57c16ff22349e2521a60dc7913d57fa6d76d5a02817b4102524f7ac8a1a4baa6447692c52adb48217e1c7889a2917a647db74e0f37b2fdb6b79afb2c6888fe174e606b543c39f712811309795b338e337b188f0ee14eac129f11ba3ef193cf493aa1c8f74f3cf39effd7813606ca18288f22c1e71cf18f5d69fbdab010c61d975dad63c8a13703c2800406572df527a47dd7047f6e86b0dc5dfd5b2acddfddc5efa540697a435895daf9f3aa6cbcc1f36da32d1011e0407e365d9db9aa163f9f33e539ae00dad139e0c0c0971e4254804139772f4825273b57d8c3c9f78e3b25fea6f9b6053c93bde234a1d88f3c5b8648ecb4475c1ced442f23cc877dfcaccb1320335093d311301fbee6cf2f62935429be8f6f4d9ffa317ae32703be0a5606d1f02169ec0d4e9fc4951b02d1a2456edd3319bd00834ef471ce1188186070739f898c1752cd095882116dafdcc1eb21e12352a29407ba59f02da9a646a78feddaee2409a1c72306ef29bd59b5e8b4493754bf47d4565cef0ce485f7b15b6fdc6ed19f53cee29626128f177b9e17eb698ca586c2e5022f3d27bcefe6711930b72364495ca5a67af6b2c2c2174984db649ab9418", 0x1000}, 0x1006) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000008003, 0xffffffffffffffff}, 0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x100, 0x0) sendmsg(r1, &(0x7f0000000740)={&(0x7f00000004c0)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)="71ba776d357d246e67e1dd77295ebbc607e564ae73bac0c9c4c21aa0c78e339eac8d1728caee2725917378f76172108c466911a172", 0x35}, {0x0, 0xfffffffffffffd99}], 0x2}, 0x800) shutdown(r2, 0x1) 08:40:04 executing program 1: mkdir(0x0, 0x20a0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x0) open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x10019) sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r1, 0x400000000000005) getresuid(0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0xffffffffffffffb2) mkdirat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 572.143232] binder: BINDER_SET_CONTEXT_MGR already set [ 572.148955] binder: 17100:17104 ioctl 40046207 0 returned -16 [ 572.156235] binder: 17100:17104 unknown command -1879046132 [ 572.165988] binder: 17100:17104 ioctl c0306201 200001c0 returned -22 [ 572.174285] binder: 17100:17104 ioctl 40305828 20000180 returned -22 08:40:04 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x12, 0x80, 0xc2, 0x0, 0xe000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) 08:40:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x1000, &(0x7f0000000100)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x9, 0xfffffffffffffffd}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r1, 0x21a, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000200)="6eadd0d761e0a0c7aa6e8214f3cfc1062cf986f6c408e17152906e1edeaa8bafca6f856a8438983185f60b53512896d553d49171fe536bd5d081076f973c7be49303368b93d94ddf3176af475e81e0be7648df557850b413f7e8dda5e00a073adb2739fc3edd08a10520cbbd94e85a80f6b9105c3d0bb0151dd3fb671534dd10ff3eba1750d89911590cd6d2efe3616336e6e29671fa52dc9765e20de7bb6d526c1f2aa2a1a192a2c03cda2de24c4228eb4ffedb597c645c55dee40e27d5e8bc01a7ce615908f8d70b0d178d", 0x14d}]) [ 572.187527] binder: 17100:17104 Acquire 1 refcount change on invalid ref 369098752 ret -22 [ 572.195035] binder: undelivered death notification, 0000000000000000 [ 572.204499] binder: 17100:17104 unknown command 3448202 [ 572.223419] binder: 17100:17104 ioctl c0306201 20000000 returned -22 08:40:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "1d5d30c07a11dc10ba3c5541cd2aa6179143f9430caed2011e96745f7f4efbdac1a3395b7905a0300a6a5a232053a1eee0e7a72bf19b85fd1eb1d388028000594e6879fce9dddb35ee66907dd818dbc004f8114c3f894fe8c97871c3d9cbb2781d1f67b7fba468754ac4d88ff220cc6068fce41ace4d3b0696a7a76b030eafd75decb3b6aa624f8c25e5d09d9f44d178eeb751ee7af233ca25b3c787b850bc3cd432a24cea54748c1200ad2819028e1983a5970a0f81dcd14f6f182a9c0e9b5e6db362e951064f7fac571f81bad805dad7c237dc918fc39978e8bac855391ab9e31e58f408a58a163057e3edd63d3b3bc18f57a714b6655bc50b00b909c9d40be6d0a9b4e30679b70a2de7fa908903d5b98febb48cf03524cdebf4f0e272d219c7332fa92599a3d978d628316888a5db556346078f7f4886b8336f8855d39c9e3a005f69abd07e256369c51cb8bf459fe851573a1f5b66c0b17cedd3873eba0258439be865811b5ea58747749c2a47d034a2c1f568c69bf96414edbeab7edb7bb22986c7edbeb24d4b5552fee45961994a0758b43de48481f565565ffa7437b16596c2f8329218fb66b1c211916a757ea3d24683774eb50e98cea8167ef2f12b6aa83d8b47f681c54ddd1cf86b4bfe5093e29406abc59289187335f2e0ba1f10c284082f10f9d99934ab942b5d838afe69ae775f8eaf5fd0d8217b2f4badcb79560bee6e3e13143e4139ed13039ee29bcd6519e55f435e17339c5debfa77134e77c25a2db0a45d138669c60947bc62a3143bff6d1768a5718fb4bea327c5ca1d73445ed30e28d992723bb60e0e03e0fa79663c7867e061b33ae09a4b5de4e862fd1811d14bfc6c20fc07bebafd2e554b455187a89638833af519e7c6c3980409746dfe3afb08f6a664be380e114d6dbc635954776372bbd1fe1fde557fe5b3b001c3034191191a73e785e32f78d6343caa76e30181817be273d7749cdc44e2929e0a894128e0c4ffd3715d9a374a5259274fc20bd983fd176cf5491f071a225c3d46993f68fb51b76ee810d436b1320ec71373832243c4fe4dfc334c7b19c05e310bfa62b4023c71d186499531d9c64e1eed15fdef1ae563ae59648a229efd504e304e6bebaec20b6f521e17c4ff51eb10af9fecbc743ed6fb40311b42627545c26c300813a27fd6c872a295e062018badcbeb738a73849f9e73f5c0d7e20ec7ca221a1f7ee0986be122da2bd460b9a1f2e8cd9ec281203a0cf1f7a12dd0481c7f75fbac423a12fb101d4a4f4e68735a6cbb758dba448fafd9d4468de1aeeba8bcc3c2ff47e1981e3ac33b9615c4859b0158fd229df8d9ccf0d4596a6d32d88d7f455e48839de0206abb4c11c6241517355f00f208c4da2814c12f081913c60583ad16afc98bd0486cbff42e7969b46c6395fbd623ed7c461cc5480b486e6398a5890ba5153a3e2aaf100dc4b6f0986331788f72b16910d43f799dc888220531f75b785df371e03340ca52cfd521ee9032e337fa307d38db7ea445fed2e310137018dfafe5950e7282906c8f9fcc61dff43accbeb8727357f844a1ed42abdb57969b3929879eb2c5d98c87f85fba7edc2ce4077a62ddf7cc073e0dd5a2e8af30644d157d422095a7a3d2fa3f5d90745c587fe31215e8aca1b0cfc072151885e79fcb8e83b694d702eb90e25590c2a8640ef83b2ae0a895d3fed50f997afd2782b4132a491f0a18d6d3ae8f5799c37e1ede07eef58106d7d539528110a9cb2d89853399fbfaff6a3ee74ccf405686cf295ed7257a22855ccf684b1473142c1ab53067d78cf03e6164ccfff5c1e17caa0d0e888b8d27911db20224acea099983366dbab9b7527569e3469d14d512db7c2c81b96651e0f0884d288aea5aeaf87d2bd7cb22a0f58234a7c38f787cb005f2d727e39c01f2aa945b6fb5dde8a8602b92ebef9c80c0f4e444de42dad2c709fafa44ac9829446c02601f3d16a9975c0acd0d7b4ff32925e9661f2656d1d5f4d3bfe00339d2f280f691e8d5ee3da1d3d536c98887f6b594be75135364a0d416a433b28a3f18f63a337575e050ba379f8972872818ba0a791376f5d900e4fa349f1a6b82b1eccb404425c8cb50bc27e1dffd94dab330309402e8f284a1d0791d269a44fac1543f8aae43122edab1ee412e8bec21d76c5bbaa39793a3e1293899c81c0e2e8a7584ca0a5139266a62f4ba092a536dd10e2b07b1876d4f35730e1eb1b9956eacc27b2c9e7da475a52de8d8e0ffda986930ddb139f50c1cb863c39f65e1c1d2a2468d71c9516c0c9ac1eb139d98613388b23c31d4436b7c7a93d840c35c0b7a624dead1c923be7b0a63f5cc3af155bd098c9a259f432b710decca86ed3cb0447680716100680b652529b5e50843d8bfb21f6800f3792154648d0902b2ca709646406928ebb7b9b540a74bb06d3aceebb4c6b7a9000c01fdd9b074b57cb6578fa37b9802451bb502afa2cca96503678100f40d60e7e8f8c30aad4c9c3e387d77edc818dc35b3b7b3f6b7e9ff05c566d37d77e8168c99d3f5836b7397a63c84284bb814f18da26ca23d5c275f1c7d2f3977a97f9da1dd00c87d032573d8e8314162531502ddebd9ef5fdf3e3ca736ed2f69a7c1e56b86ca74b6fcb3b8013fd7ff128bb53a80a1412190cd90de559648995f9285eed6955061ce7c3e9621ac20ecc1b04359e3d7681866832d5c773117c432b4c353b510c0d2511c3e71f9bbabbc0fea7d2372c8cd15cbf8e548b2c508d3e46c02a608c4f784e1d52ea8bd302774c0a5c9fc5b622ffe3c0dee34959dba0d1607354d6ccaf9948707b045aab2e76615f832b9091f4a17a6710d7f828931a682cca0816964420cd48597a0684507a054f27404f1cfbde600ab8022d207c1046ea25dd75249061c53cbcd8d32b74fa5ec74b21c8c027a24afbb0afd092d659ce256312867827c6c863791c67988ffe02643e9c3c269a85085a5e505716dc2e57293e718ead0707bbfd9fd64d7ec31ae84a9326f297db4a426a43de144ee61ae6c6e4659d11345224ac86759fa64c4d20ee45c8f400fbbbbc4c23648c07419f2fbecb7f5e150269d8b75a1de150c9fc486ade162d05a8566ff39f51e70d45314ecec9cb6197ee486798f974a2a7397aa1a72ddcbf775d09245cce9cb401e64af26fcd69e40c7dfa992154db291a0181c5a01d8ff712b4604f77dd4eb370070f0f3b01dd2fc3490570471f7fabc33cea826f42ea0e974c967358a6ba0e44105bac0bcf2687d1224217409ae33ed439d0845d8ca488e0cfe47c39f7b3bc800a3036ca41db2298dff54d4247087b360bd08187a5876441d852c0f53e0f6cae10affd433a3d1abba2cb3fdd241233eeee4b0ae8a701ccca2836732a9d802293dc0ae266cc0bf09fd73370f9a3ce31ec816ad67815fd3fb3db6827f722884d7299d3c7c8d81fd6d40d739bfea350f30f2b57c4511ef95e0bb3f867cc9b24915033c096c48934ce89ace3b62b2f2f75e48d466a0a1261d585a9f7553096dece0720cf73d9f60b46048d79f0e84620a77610a255f6a56b975a8df452dbf72c5e3a8654ad01e548e0f32fd972036eecda6e2bc7fdb70d38f9aca4a5c50e9b9a9c0c407b214289a3664e1f8ab3d633328d00bb5c55f89b94ecaac11612e623e44d0a751b40f7a25371387a0864e73e426eeaf67b8fc9e5d27d273a5a6c5e1a3f310e50740d5b8fcc1db86295ab1a6f4493bd1815ff2493794a069a12c5e7ef4142afff253520b61c266d3bed63200370aba79e3ac23d8894cc1842222f31a9746118365f90398a9c75678aa3db91038a20cd609c37f6651446716915ddea4f0a67df3d8270f2c29da655136ff60792d893646b1c0b29eb8bcca9d3ff5e0a09436e5bff740d4e6faf8319e7dea3dba636750a5451bdb992ea1c31c039b6145cc237f91530512175f370a9c466abbcf9e88d2836decf7b28025e89499fcd116555fa1faf7a86c7827ed0e7e50c3ebe734e31d586f2125f2f491ac35733e78272f734634bbdcc23627fa15aa56a3777c14d0e5e9c4acb5e8799762598b9804235e1c265ea05a691a715a5c62cba917bddc5f27df8d2e340359e536a5ed5ee51d46d98a408b411ce4b1b4a7c58a15360db1e258c707382b1c54f0ce651a8175ae3cff0b5d7c4f50418bb2d9c1d8f74763a14ba7ce8c7d735c0fede4dca4b9919a07028317d6def62337fdff93c98f2f1fc72e9462a387b27f49f67de8b869a8387c57c7f6f5d72d735dc2ba3dd54e8f1c84b2fffc6d5ec133baf636e721fd5c663e3a91eee1c2a85d979ce19b55c3869755fd16340d991702ac40f24923c2336d18b38b0e8dd9348bfe69c0b7d0fcafc30db3a77660984a93958047aef4a3cc59d41556294facc086a655da83d482c2da32a6d5515a1b4718f09da2f4ef8463e942f8794a3395ca0a7688c95ff0accef2f005fee2de7ccb3caa0b24a6bf1b93d0669d242e92a157ce3abec62f512bc2184517e54006eacbd5327c61b927b9787551828aa97c17b2515467786eec69f55ad42aae731679eeae685d257f689ed9ea57b230ae0f6136701eeb740e36566085e342d30576c8272db8d866a1c0280d2433f22e87b5f6931441afc93bbfeb6adf4336d0aba318b0b6bf1f46dc60c8682762953564f570f76bfa116fe025db0d94094b119ab16128faa2feb273f83367763dd2f0ef5c1cc540dd12912949843c61f64ffa3ccf4077ed48c806ffacb09c43faf3739fb7347f458cc71ec498315e30c025ba9c442a45ef276971de1e36c88efeb13729576d32a650fa3ae95eaa530172147ce6372b474a2f5f1c625cc1c323529200f68b4bf4f229b88a7569aa02c7b483f5934fb7934b60e6f33a6ec952f18c8c4ca01dc920f3cf4826b85c9e368d45366c4e5531002be8b7c10407f08c5476fb894fce7f935f09c5c0f0287f5bb54a7f91bddc43658f555491616d1c73a75f6e835e4792add9e25f9df1b7f735bf068bba36bfe112e7040f15e3bd3599a6df4f934dfaf45a3c6899e11fd3a72c09720964c2e269cd0659dfed1499b67514978d62e879a8845ff7a2927b0228532fa5d23494760f9c0f375afb4993f1bcb9b9be45ef14fcb3d5af0205db4e3ccd20f5f9f0e0fd78683a3cc2ae40c1f4989d6a51139c5eed88dd8b0905c7a1a5cd1d8b15e644c26e6fdfe643445eac92186cb5fd220abf6cb645b4f016ec5e0b85d1d6fa08608ed6df8a7371667e193603d7dc0bad443f103d3aa03a69c8bd30a4849861dda6bc64e11091723c163cc0887885bf819fe31f3b76b3b217b1b0d5e27c5975dd68cb99bc3d6b2d6b7f0bbc50c1536ead235f34129f4d1c83e28c2f34b9be44af8a491268e0564418c4aa2f6d87429134364d7233674f7c7e014cb28f6ed18ec2aac6e9a3c29a8e1849bdac9183bba2b8732418d9ebf2cded246afa3c59576b92d9b1a1d53c375d4353a40f4c8621d35aea8a0923ddbf0095ba35fed100ef8969e908c5b373f4f6df65a3b6642fb62b5ee550f4e4624baba2d41bcf89a1e87cecc5fd87e72adb3d7cfdfb081b0bf07c04426188af4cf2776d8de2e8f30fbbb03af24a3759ff0dbaefc39dfa4f7fc54a99bf950d1c6b519236ffb07766c4fd96a7f26f85ff64a4121888fe85bfa335cf8b3414ef0b320bcb5b9ac18fc2fa8c02a5b8cb2b6a6bd6d015737374f9350f596b69b4c08ce6f6f5a2d42a0e8305454801fddaf37f73854157f1acde20c0450be5cc536a0638287dfd7563e1bcb2beaedf8a674d9d1c1e108085f1d80606695bdd90", 0x1000}, 0x1006) [ 572.261074] binder: 17100:17118 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 572.270791] binder: BINDER_SET_CONTEXT_MGR already set [ 572.279772] binder: 17100:17104 ioctl 40046207 0 returned -16 [ 572.286385] binder: 17100:17118 unknown command -1879046132 08:40:05 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000480)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') lookup_dcookie(0x4, &(0x7f0000000180)=""/66, 0x42) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read(0xffffffffffffffff, &(0x7f0000000240)=""/87, 0x57) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @timestamp], 0x2) unlink(&(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) execveat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000000c0)='\x00', &(0x7f00000002c0)='ip6tnl0\x00'], &(0x7f00000004c0)=[&(0x7f0000000340)='vmnet0/eth0bdev\x00', &(0x7f0000000380)=',em1ppp0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='bpq0\x00'], 0x1800) [ 572.310465] binder: 17100:17118 ioctl c0306201 200001c0 returned -22 [ 572.317415] binder: 17100:17104 ioctl 40305828 20000180 returned -22 [ 572.323135] binder: 17100:17129 Acquire 1 refcount change on invalid ref 369098752 ret -22 [ 572.343066] binder: 17100:17129 unknown command 3448202 [ 572.349205] binder: 17100:17129 ioctl c0306201 20000000 returned -22 08:40:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) r1 = syz_open_pts(0xffffffffffffff9c, 0x400) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 08:40:05 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="88a0beb4a6b15504eb9a00") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) fremovexattr(r0, &(0x7f00000001c0)=@random={'system.', 'bpf\x00'}) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) r1 = gettid() getresuid(&(0x7f0000000280)=0x0, &(0x7f0000000380), &(0x7f0000000400)) setreuid(r2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000240)=0xfffffffffffffeae) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r3 = memfd_create(&(0x7f0000000a80)='\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18', 0xfffffffffffffffc) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f00000009c0)='y\x00', 0x2, 0x1) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000b80)={[{@mode={'mode'}}]}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf8d) setpgid(r1, r1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000680)=0x10) getxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="1c62706620000000e4b05fa26157bae3149c20db36b1081e3b466119681a9867421f407fe49fd8458e5b95f77c57032e3411585fc8659c4b"], 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) 08:40:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x3, 0x20, 0x9, 0x3, 0x12, 0x7, 0x2, 0x80, 0x1, 0x8000, 0x5}) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) getsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f0000dbb000), &(0x7f0000000100)=0x4) 08:40:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 572.361898] binder: 17100:17104 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e5b8"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 572.426757] binder: undelivered death notification, 0000000000000000 [ 572.437407] binder: undelivered death notification, 0000000000000000 08:40:05 executing program 1: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x4) r0 = socket$inet6(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x20000000001, 0xaf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x1, 0x20, "f8a7a0c6e95b8c2f68f46c09c32dd5de4f447af3495e9d8121f8da9fae22423e"}) 08:40:05 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffed9) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect(r5, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept$unix(r4, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x11f) 08:40:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="056396c826e023fa0a9a990d7b33080000e9c327097c4000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c4000000000150b51b4580f04af27e8e7b3609a8efff36dbb290af36bf03f649a1388925d9d9aa81a36b319357ff8b167723e9db0cad1872c00659d5f926908b4a8f47c1bc65bdc0f425d28295d077daefe42fd0679ad422b5233a0a1fd5a31b63ac1542fc914ddf2bcbf79ee5f2357062681a8b9e6ea7ca8d46ea6bec27c72349bbf3d08d08510475d8015c3d534104b815b6b2553284ef38f8e44746254d1bd596fcb18a694705f06aa45c949ee49842b2bcbbb067d0560ba2299f9007d5e7e4326e24f2f24d3b5d0c79b5852eab6b25134a1dc533daa504c5e881585cc7e5ec85e72f85d61b321ba2f7049a7"], 0x0, 0x0, 0x0}) setsockopt(r0, 0x3ff, 0x5705, &(0x7f00000000c0)="8414c60baea799360aee1f525e", 0xd) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 572.467998] binder: undelivered death notification, 0000000000000000 [ 572.480917] binder: BINDER_SET_CONTEXT_MGR already set [ 572.486606] binder: 17137:17141 ioctl 40046207 0 returned -16 [ 572.491866] binder: 17137:17150 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:05 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0xffffffffffffdde, 0x0, 0xffffffffffffff5c}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) fadvise64(r1, 0x5e, 0x0, 0x0) 08:40:05 executing program 5: mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) read(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r3 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000540)='/dev/ppp\x00', 0x0) keyctl$get_keyring_id(0x0, r3, 0x80000000) pipe(0x0) mkdirat(r1, 0x0, 0x101) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="eb36ccee227ee429dc12453da61ddb0dbb662a19c00758f7beb7fb4b9931c38c2c59bd16fa4b92990cd53780f9fecfc8cbf9ed4a3056f2853263300cde71969e55815508ea7bc958e1e91e73d6dc8779acc02efe8492c7ce66b88fbfc8525841cccd4ea77d05128af7b8cc1a2d00598dc923158cafbf", 0x76}], 0x1) ioctl(r2, 0x5, &(0x7f0000000580)="32c87dafb757e28892bcfdd93acd0c706cca94db11dab8ff49c2f29d9e7f9c2fcdc24b05021264b19ff5cabdfa2732aab41b90a187d01c3ab08de060653b080c74c765fec6f2fa7b9a57a9bbb66f73a39c739be4c6df41fb707e2115c5d974687277a4af802634f84d52fcd6314d3537b5f6e6d3eec70fed81b796a533bdeaa388a4602dd15a3bb86bf377963cf3cbc16dfefd3b508885544632b344d10583f40921") sendto(0xffffffffffffffff, &(0x7f00000003c0)="bdcac75edc7d599abcc4d59abc00866393ce861d894c70bf38dab2df3d4b0d4ca479f4d90a861aedd4e63fa9b3d5c0d673bab2d4f47fe2629f01ada65b4320b0ec7cb3b31521ec3a112d63d85007f85355580c553509a4def9ae57251494b9bc342dd603a5b3f14ebd4a6232381ee6e238bade25c210463d45d1dd14cae68120e3e380eed4f5662aa6bd374a5c78937f28cda3412a5c53d12113eac0c014ab743aafcdcf428e8bc11e5ffdacfc78a8f492786538d125722bf393fceac7beed4b9e0055c6866161589fd627a56f06e4779e5576449accd556194385443cc24379d293b750adaabb6f9b0bb8", 0xeb, 0x800, 0x0, 0x0) 08:40:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket(0x20000000000000a, 0x2, 0x7fffffff) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000040), &(0x7f00000000c0)) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) [ 572.593234] binder: BINDER_SET_CONTEXT_MGR already set [ 572.605026] binder: 17158:17165 ioctl 40046207 0 returned -16 08:40:05 executing program 5: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@x25, &(0x7f0000000040)=0x80, 0x80800) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000240)=0x78) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'syzkaller0\x00', {0x2, 0x4e20, @loopback}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='system_u:so_t:s0 system_u:object_r:iptables_exec_t:s0 00000000000000047187 /usr/sbin/cups-browsed\x00'], 0x6e) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e5"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) [ 572.642852] binder: 17158:17165 unknown command -929668347 [ 572.661400] binder: 17158:17165 ioctl c0306201 20000000 returned -22 [ 572.676237] binder: 17158:17165 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@loopback, 0x7e, r2}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0xfde2}], 0x1, 0x80000000000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000340)={0x28c, 0x7, 0x6, 0xe1d, 0x8, 0xffffffff, 0x1}) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000004c0)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x8, 0xc1f5, "1d609304d0d4eec77eeafd4d03d5308dc7233ec9eaa7d5c249d794c8bc5e76d651d0c169e2dd0df020e8b62831a1569d7e817ed94bb15b6ecf780a1ac8d850", 0x18}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)="e3f7b7e4fdc50d7cd232c6770899e2f49888ad56c6903c68876306ff54c9f7e5e74417f919ee150e9b22e3a935a6530a64bae8b1776ab6cc8fa97cc8059a811f20fe4bad4ab3483dae38a3b5129baa36dc6bc543ba7ef30c684efa2afddbe66a20bfc4d079a42a1a235226f0c7090c86a7d11da357f8952daef62a66e8ecc27b56c9d986469c025849703b899e09d862b318569b917482fc5af38b0b0c375dc6e7359d53db39769ec82bcb8f97c6a302f0150e9bc70c16be7ed714948608b53bd3ec5f17ea99865ba1ccc40d5f7fab9f1948b26943b173a6efac8369cd24fa09b6b9d937b0746d3877ae2be35dac92cdb6b7c8", 0xf3}, {&(0x7f0000000640)="aa8782926e89b1c58a14f1bf445f104d4fb52d9d6485506d484309f42abdc4f52898ea7b0c80a5d43d2dacb39dfbf94a5f2dddd78d0d2c2ec56fdd96507c1e9b5e346988e057292eeb24397c74e2f10bb4b524ec1e", 0x55}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000006c0)="5dea0fbbf6f9c91ae0c2035b199b85eaa098ca682d8045e78610d6d0614f621788ab4e4f7350459c04124649433b60ea745cee1dae5def97419cd6abb8f96d485ed5ff153d56f7ee3eff8c10429aa09cb4bf692378219ca0c81fa0e7e01a6d5ec57967e00fe1d22d110baaa7d8a765ec08867a0db5bb1b6bcc2d4bd81c174b0f84a90899c6e260c47ec9d8a544d42f7b03838d7bbf3c0fd87decfa0aecd5b53186a6b41edaba18e885da6f1ed0dce52d050c6eeeed4624", 0xb7}, {&(0x7f0000000900)="b1b16924c7f677d02e1099efdd57b1b0ee5dd6a51b94cb635289e60d733979a7ddc353193b83d33606136a507a54cd26166b1251379d37c79b24c30f1b39501ba37cea544a45d7a11a5d242821bb008d853f7f0c488521d961a6f42a813694d780af4779ffe37242de3aea1b41c10c78dec6144381d9382342be0063c417e4207f678488e687a3d9ec3a99ba5eed5f72899f16b95aa6abd15839e24b5d49e6bcf1d19446987d5330d45789f05044d23897168799b0a35d884cdbabd82795541da760a5f7df186ab024d1d07e0d53b5452612d1ff56269ac59e30a97177c9", 0xde}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x418}, 0xc000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000180)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x80000000) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000e40)={0x3, 0xffffffffffff0001, 0x7, 0x7fffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r4, &(0x7f0000000700), 0x31f, 0x0) 08:40:05 executing program 3: perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair(0x10, 0x800, 0x7, &(0x7f0000000000)) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x1a0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, &(0x7f0000000240)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x3) write$binfmt_aout(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="0801200303010000b3020000f20e0000030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f24c41470000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4b3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x2, [{}, {}]}, 0x48) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r3, 0x0, 0x0, 0x4003ff) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r3, 0x3, 0x40000005e89, 0xfff9) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'}) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0xffffffffffffff38) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) [ 572.688388] binder: 17158:17176 unknown command -929668347 [ 572.694604] binder: BINDER_SET_CONTEXT_MGR already set [ 572.695136] binder: 17158:17187 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 572.699980] binder: 17158:17176 ioctl c0306201 20000000 returned -22 [ 572.723198] binder: 17158:17165 ioctl 40046207 0 returned -16 08:40:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440000000000e630c4000020000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x161, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:05 executing program 4: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) socket(0x13, 0x5, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x9, 0x4) sendto$unix(r0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000280)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0x9}], 0x1) [ 572.822586] binder: BINDER_SET_CONTEXT_MGR already set [ 572.841823] binder: 17205:17207 ioctl 40046207 0 returned -16 [ 572.861438] binder: 17205:17207 BC_REQUEST_DEATH_NOTIFICATION invalid ref 512 [ 572.868335] binder: 17182:17215 unknown command 47333 [ 572.874415] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 572.878559] binder: 17205:17207 ioctl c0306201 20008fd0 returned -14 [ 572.884036] binder: 17182:17215 ioctl c0306201 200001c0 returned -22 [ 572.907349] binder: BINDER_SET_CONTEXT_MGR already set [ 572.917459] binder: 17205:17223 ioctl c0306201 20008fd0 returned -14 [ 572.921004] binder: 17205:17222 BC_REQUEST_DEATH_NOTIFICATION invalid ref 512 [ 572.931699] binder: 17205:17207 ioctl 40046207 0 returned -16 [ 572.943664] binder: 17182:17224 unknown command 47333 [ 572.949084] binder: 17182:17224 ioctl c0306201 200001c0 returned -22 [ 572.956192] binder: undelivered death notification, 0000000000000000 08:40:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x4240, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) write$P9_RCLUNK(r1, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304c0000000000e630c4000000000f99a5d0f6d079b8c12ee33798ff1244a1fece8ed6e8c188120b5e03b74bc5275fba3e2c036bb1ea2a850c7f2dcda96cbf087"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c40000000000401e694db9442e0ff917ad22364b9cfd9003b4e5ced2b97a10e1e608795781677f3d0e0f558c7bbc66a36b1ecf67d8681dafe97849ae26e5629c5852d775f2408ab53b43a542dfdd67efbe86b90e772bd52b71f787df2333c8829f781dea8d5ad58c304ee6e1ddf23b90185802c77f27ac1b73dd60fba1f7fcfdf7dff56b6a7ce39aa9ff84c147efb833c06505535f6498aa5e61fa5253462aad5ff39c454ba5b9d8b9ac3cfdabb9e2a94dac5dd11fde9b3e070634835736975985d9162994bff7b000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) [ 572.969546] binder: undelivered death notification, 0000000000000000 [ 573.027823] binder: 17228:17229 unknown command -1073454331 [ 573.070367] binder: 17228:17229 ioctl c0306201 20000000 returned -22 [ 573.077228] binder: BINDER_SET_CONTEXT_MGR already set [ 573.090203] binder: 17228:17230 ioctl 40046207 0 returned -16 [ 573.101399] binder: 17228:17229 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 573.111790] binder: 17228:17230 unknown command -1073454331 [ 573.122594] binder: 17228:17230 ioctl c0306201 20000000 returned -22 [ 573.129578] binder: BINDER_SET_CONTEXT_MGR already set [ 573.135317] binder: 17228:17230 ioctl 40046207 0 returned -16 [ 573.141597] binder: 17228:17231 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10b000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@random="82c9cd2970da"]}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001480)={0x0, 0x0, 0x0}) 08:40:06 executing program 4: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d64ec5dff000700050074aeb3008c90005ab12fdc26745c95e058eb2719a2a9139e2f008726eab78724165971b8640180"], 0x39) ptrace$cont(0x1f, r0, 0x2, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0xffffffffffffffff, r0, 0x6, 0x2) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r0, 0x12) 08:40:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="e9de3cd6000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:06 executing program 5: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@x25, &(0x7f0000000040)=0x80, 0x80800) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000240)=0x78) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'syzkaller0\x00', {0x2, 0x4e20, @loopback}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='system_u:so_t:s0 system_u:object_r:iptables_exec_t:s0 00000000000000047187 /usr/sbin/cups-browsed\x00'], 0x6e) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e5"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 08:40:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x80000, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 08:40:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendto(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89f4, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0xffffff24, &(0x7f0000000500)=0x208000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2008, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000440)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000007c0)={@loopback}, 0x14) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040), 0x4) io_setup(0x40000100000003, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) [ 573.510819] binder: BINDER_SET_CONTEXT_MGR already set [ 573.531541] binder: 17244:17250 ioctl 40046207 0 returned -16 [ 573.538984] binder: 17244:17250 unknown command -700653847 [ 573.541036] binder: undelivered death notification, 0000000000000000 [ 573.546559] binder: 17244:17250 ioctl c0306201 20008fd0 returned -22 08:40:06 executing program 5: getrandom(&(0x7f0000000080)=""/44, 0x2c, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x2}]]}}}]}, 0x38}}, 0x0) 08:40:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4000, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000300)=@routing={0x3c, 0x12, 0x3, 0x90, 0x0, [@local, @rand_addr="ed4448b5ff8ac7cecae83c8bab963083", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @local, @mcast2, @mcast2, @rand_addr="c397d02f1554fd72646cf25d368ba3cd", @mcast1]}, 0x98) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xfffffffffffffd92, 0x0, &(0x7f0000000240)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@flat={0x73622a85, 0xa, r3, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x0, 0x2, 0x31}], &(0x7f0000000200)=[0x78]}, 0x6982}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) accept$inet(r0, &(0x7f0000000400), &(0x7f0000000440)=0x10) 08:40:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0xfffffcf4, &(0x7f0000002f80)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001280)="109a90d0d8689099f5f671fc4239410252b6f1ebd8841efbe105d3c8a9dcaa73614ee09c77ce299ed2799f3bc24f1ce58a823c5c6b7bc6f52156ac5ab94e7142b73346256d0f31971d96d5abac62cdfed4c3d63e98237a2716eb6e3208c58b6649207d7e8d468b59c5331bc7178f9e65621300103ca83a380141394c61781889f23ec7e05310d9347dc89710764886b307317b3e982a008222512e2607bd70b861e94cfb92ef470a3b9bd043118e46d933db975db6207cb4d40cbfc55867468ecc2b9821a10d932424dd1151c209fc7f81a1e60de8f701e9b2366d51d336072fce2e78e2e57f1b9f0eee50bbbdad43152c73f04a434741fe733def67104cf80d") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000180)='54\xce\x03n\x00') preadv(r3, &(0x7f00000017c0), 0x1fe, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 08:40:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0cbd4c880b6ed2759715cee2db68a7d5"], 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000040)="a45beda19190b1af8a788b", 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440001000000e630c4000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/4\x00') r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}]}, 0x54}}, 0x40000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 573.555172] binder: undelivered death notification, 0000000000000000 [ 573.575769] binder: BINDER_SET_CONTEXT_MGR already set [ 573.581347] binder: 17244:17258 ioctl 40046207 0 returned -16 [ 573.590509] binder: 17244:17258 unknown command -700653847 [ 573.596199] binder: 17244:17258 ioctl c0306201 20008fd0 returned -22 08:40:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x101}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={0x10}], 0x10}, 0x0) 08:40:06 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000001e00000425bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="100100000090160008001e0008008000"], 0x28}}, 0x0) 08:40:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05637f01000000000e630c4000000000"], 0x0, 0x0, 0x0}) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f63160000884c6cc7bcb7af6dee5a7b1e8c6e614c6876d13f267348a9cbfe22fe78369dae0fc48b0bd8e8741b"], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x265) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() listen(r3, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) fcntl$setstatus(r3, 0x4, 0x42803) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 573.657525] binder: BINDER_SET_CONTEXT_MGR already set [ 573.667102] binder: 17265:17268 ioctl 40046207 0 returned -16 [ 573.680781] binder: BINDER_SET_CONTEXT_MGR already set [ 573.686724] binder: 17265:17268 ioctl 40046207 0 returned -16 [ 573.737124] binder: BINDER_SET_CONTEXT_MGR already set [ 573.744723] binder: 17280:17282 ioctl 40046207 0 returned -16 [ 573.762526] binder: 17280:17282 unknown command 25125637 [ 573.769773] binder: 17280:17282 ioctl c0306201 20000000 returned -22 [ 573.781406] binder: 17280:17282 unknown command 1467151 [ 573.786856] binder: 17280:17282 ioctl c0306201 20008fd0 returned -22 [ 573.941069] binder: BINDER_SET_CONTEXT_MGR already set [ 573.941255] binder: 17286:17286 unknown command 25125637 [ 573.946441] binder: 17286:17282 ioctl 40046207 0 returned -16 [ 573.952938] binder: 17286:17288 unknown command 1467151 [ 573.974822] binder: 17286:17288 ioctl c0306201 20008fd0 returned -22 [ 573.981511] binder: 17286:17286 ioctl c0306201 20000000 returned -22 [ 574.069416] binder: 17291:17295 unknown command -2008236788 [ 574.075413] binder: 17291:17295 ioctl c0306201 200001c0 returned -22 [ 574.083800] binder: 17291:17295 Acquire 1 refcount change on invalid ref 4096 ret -22 [ 574.091925] binder: 17291:17295 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 574.099915] binder: 17291:17295 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 574.109123] binder: 17291:17296 unknown command -2008236788 [ 574.118099] binder: 17291:17296 ioctl c0306201 200001c0 returned -22 [ 574.124846] binder: 17291:17296 Acquire 1 refcount change on invalid ref 4096 ret -22 [ 574.132910] binder: 17291:17296 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 574.140234] binder: 17291:17295 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) sendmsg$key(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="021300070600000025bd7000ffdbdf2502001001000004d4000004d60000000002000a00050000000600000000000000"], 0x30}}, 0x4800) 08:40:09 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00'}, 0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000d00)='./file1\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/enforce\x00', 0x210000, 0x0) getsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000900)={@loopback, @loopback, @local}, &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000ac0), &(0x7f0000000b00)=0x0, &(0x7f0000000b40)) getgroups(0x4, &(0x7f0000000b80)=[0xee00, 0xee00, 0x0, 0x0]) getgroups(0x7, &(0x7f0000000bc0)=[0xee01, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000e40)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="02000000010003000000000002000700", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="040006000000000008000500", @ANYRES32=r5, @ANYBLOB="2002008570d95493542a23816bfee5837ed9e4b2417ed35271472699e40e2b3610c29662b14c065caa44adb696b91906ac577fbc01354b0147c785277cfae5e0d65c540d0110a32aff9ca2f1b0b22eaa7ab3d9ec456d322821267cbc9d34edc1a8389534b7278561bc8275385ceda7665fc1df2ea4156311fdfecaa19b0a3283876f64daeec34204f25d036ece6fb629e7bf1d3d2fae85db1f2b110686c1e60fb0484414679af83b95d0cdf477635f2b52b4caee7e08dc89c3a487285408f83d985cdde369df9399618f2e1a42eb25d3a692a01bc96675698ebd22a7ba09683df88c9e9cbef6dc7ca6fbfe99e4ea7682fd4a8bc6", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="10000700000000002000010000000000"], 0x94, 0x3) setsockopt$inet6_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000c00), 0x4) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) pipe(&(0x7f0000000c40)) prctl$PR_GET_NO_NEW_PRIVS(0x27) 08:40:09 executing program 1: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x4}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffff988e, 0x1000000000000000, 0x0, 0x4}, 0x0) 08:40:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:09 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r1, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xaa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffff800}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040850}, 0x8800) syncfs(r0) 08:40:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x3, 0x1f}) [ 576.514589] binder: BINDER_SET_CONTEXT_MGR already set [ 576.527119] binder: 17303:17310 ioctl 40046207 0 returned -16 08:40:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe8b) unlink(&(0x7f0000000040)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 08:40:09 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) open$dir(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2121202e2f66690eda6cc7648a9a477b65302c80f936bf8d844944d7cfde6c8515a2175a47b41818"], 0xfdef) 08:40:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/255, 0xa0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) 08:40:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x800094, 0x0) chdir(&(0x7f0000000000)='./file0\x00') write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000500)={0x43}, 0x43) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) [ 576.559423] binder: undelivered death notification, 0000000000000000 [ 576.568180] binder: 17315:17316 unknown command 1074553605 [ 576.576895] binder: BINDER_SET_CONTEXT_MGR already set [ 576.583617] binder: 17303:17321 ioctl 40046207 0 returned -16 [ 576.591625] binder: undelivered death notification, 0000000000000000 08:40:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 576.631028] binder: 17315:17331 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:09 executing program 1: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1}, 0x14) r2 = fcntl$dupfd(r0, 0x406, r0) sendto$inet6(r2, &(0x7f0000000200)="030300000300ffff00000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110f118d0000f5cfe6fef5925cbf34658ea132797b1abc5dc626fff59b00fb6e11a2ffff00000000aeb472d1f7f39968c35fed58d91e62f0919335a658f5fc13b5cf60c036347776762e36dcad0e96aac34db084ef9a0546da40a55941a3334d73c957bb2d703273b7039596948879c732a5059edc546616da243ca96f78e6382b71341b195f70015e5de5924e", 0xfffffffffffffc8a, 0x4000015, 0x0, 0x0) connect$packet(r0, &(0x7f0000000040)={0x11, 0x19, r1, 0x1, 0x3, 0x6, @dev={[], 0x25}}, 0x14) [ 576.682433] binder: BINDER_SET_CONTEXT_MGR already set [ 576.688103] binder: 17315:17316 ioctl c0306201 20000000 returned -22 [ 576.694848] binder: 17339:17341 ioctl 40046207 0 returned -16 [ 576.695429] binder: undelivered death notification, 0000000000000000 08:40:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = open(0x0, 0x0, 0x153) accept4(0xffffffffffffffff, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, 0x8) r3 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000140)) fsetxattr$security_smack_entry(r3, 0x0, &(0x7f0000000200)='syz', 0x3, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) io_setup(0xff, &(0x7f00000005c0)=0x0) io_destroy(r4) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000100)={0xc023, 0x2}) symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) 08:40:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) accept$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0xf}, 0xb, r2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$FICLONE(r1, 0x40049409, r3) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x5) [ 576.723099] binder: BINDER_SET_CONTEXT_MGR already set [ 576.736628] binder: 17339:17346 ioctl 40046207 0 returned -16 [ 576.757295] binder: undelivered death notification, 0000000000000000 08:40:09 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00\x00\x00\x00\x01\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00005b4000/0x2000)=nil, 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9, 0x2, 0x1800000000000000}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x1000008, 0x33, r0, 0x0) unshare(0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000000c0)) open$dir(&(0x7f0000000400)='./file0\x00', 0x80004, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(r4) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000b00)=""/4096, &(0x7f0000000240)=0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480)) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x80) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7e) ftruncate(r6, 0x2008200) r7 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) [ 576.844746] binder: undelivered death notification, 0000000000000000 [ 576.853709] binder: BINDER_SET_CONTEXT_MGR already set [ 576.861471] binder: 17353:17362 ioctl 40046207 0 returned -16 [ 576.877672] binder: undelivered death notification, 0000000000000000 08:40:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) [ 576.919470] binder: 17315:17331 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 576.931956] binder: 17315:17316 unknown command 1074553605 [ 576.954243] binder: BINDER_SET_CONTEXT_MGR already set [ 576.966767] binder: 17368:17370 ioctl 40046207 0 returned -16 [ 576.971284] binder: 17315:17316 ioctl c0306201 20000000 returned -22 [ 576.979781] device lo entered promiscuous mode [ 576.986025] binder: 17368:17370 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 577.019658] binder: BINDER_SET_CONTEXT_MGR already set [ 577.031373] binder: 17368:17377 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 577.033174] binder: 17368:17374 ioctl 40046207 0 returned -16 08:40:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:09 executing program 3: r0 = socket$inet(0x2, 0x803, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/217, &(0x7f0000000000)=0xd9) delete_module(&(0x7f0000000180)='nodevGPLppp0\\-wlan1$#\x00', 0x800) [ 577.076221] Y­4`Ò˜: renamed from lo 08:40:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, 0x0, 0x62) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) fcntl$setstatus(r2, 0x4, 0x42803) 08:40:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\f#'], 0x0, 0x0, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) write$selinux_create(r2, &(0x7f0000000100)=@objname={'system_u:object_r:dmesg_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x3ff, 0x20, './file0\x00'}, 0x6d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 577.343756] binder: 17388:17391 unknown command 0 [ 577.348673] binder: 17388:17391 ioctl c0306201 20008fd0 returned -22 [ 577.387958] binder: BINDER_SET_CONTEXT_MGR already set [ 577.394111] binder: 17393:17396 ioctl 40046207 0 returned -16 [ 577.401946] binder: 17393:17396 unknown command 8972 [ 577.414770] binder: 17393:17396 ioctl c0306201 200001c0 returned -22 08:40:10 executing program 4: socketpair$unix(0x1, 0x20000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8001) timer_create(0x3, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(r3, &(0x7f0000000080)) r4 = inotify_init() syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x7f, 0x400000) inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x80000002) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) fallocate(r2, 0x20, 0x4000, 0x100000000) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) 08:40:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) [ 577.440882] binder: BINDER_SET_CONTEXT_MGR already set [ 577.440887] binder: 17393:17401 unknown command 8972 [ 577.440909] binder: 17393:17401 ioctl c0306201 200001c0 returned -22 [ 577.446372] binder: 17393:17396 ioctl 40046207 0 returned -16 [ 577.473929] binder: undelivered death notification, 0000000000000000 08:40:10 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xf, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) futex(&(0x7f00000000c0), 0x4, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x2) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000003500)={&(0x7f0000004540)=""/4096, 0x5c}) [ 577.491984] binder: BINDER_SET_CONTEXT_MGR already set [ 577.508904] binder: 17405:17411 ioctl 40046207 0 returned -16 [ 577.511376] binder: undelivered death notification, 0000000000000000 08:40:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x41, 0x0) write$9p(r1, &(0x7f0000000100)="5f039fc51a16421f23dcb7ef9a633ca6d1dd342826a0189ab1a47d7b5fbbac6668b41b5d893c86342294de609006138adbace327be40810070cfb41f70e3fed6a11d307e0e228f947c69e14d51910b2334f1b7d074491a1401d317f3f3d9e28239581cd9594385b2308fc84e6d", 0x6d) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) utime(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x5, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) 08:40:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0xffffffffffffff05, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) ptrace$setsig(0x4203, r1, 0x5, &(0x7f0000000080)={0x1b, 0x800, 0x2}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 577.536307] binder: 17405:17411 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) [ 577.587910] binder: BINDER_SET_CONTEXT_MGR already set [ 577.599336] binder: 17418:17419 ioctl 40046207 0 returned -16 [ 577.613016] binder: undelivered death notification, 0000000000000000 [ 577.638312] binder: BINDER_SET_CONTEXT_MGR already set [ 577.645040] binder: BINDER_SET_CONTEXT_MGR already set [ 577.650730] binder: 17418:17419 ioctl 40046207 0 returned -16 [ 577.656992] binder: 17424:17425 ioctl 40046207 0 returned -16 [ 577.664224] binder: undelivered death notification, 0000000000000000 [ 577.675932] binder: 17424:17425 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) 08:40:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) 08:40:10 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00\x00\x00\x00\x01\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00005b4000/0x2000)=nil, 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9, 0x2, 0x1800000000000000}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x1000008, 0x33, r0, 0x0) unshare(0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000000c0)) open$dir(&(0x7f0000000400)='./file0\x00', 0x80004, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(r4) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000b00)=""/4096, &(0x7f0000000240)=0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480)) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x80) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7e) ftruncate(r6, 0x2008200) r7 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) 08:40:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000ac0)='./bus\x00', 0x0) open$dir(&(0x7f0000000980)='./file1\x00', 0xfffffffffffffffe, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=@dstopts={0x87, 0x0, [], [@ra]}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) setfsuid(r3) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) tgkill(0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file1\x00', &(0x7f0000000540)='security.evm\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="6cf5d4b8d8ded5181a08dea191abe484d8b817bda07159fd853f9d7ee971dfc8c8f440e06591457ee94fdf49c4948eebc308a7f619625b06a77ac5fdec6d64df3b8b65b9d1633f4b1ca6212b65e8e744245a304d2de87d6ae050d7507ac2d9cd2bc24af32e9544a62cd27f91"], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380)="88dda91f2b14a33fdd3c706fb3ab56b51378bce708a75a42354f6118bddc8a5de0acbd49fae222b8d2a2580088dc1e4afec2fdcfd77033c232211bd20af2bc95e8b53ff850bf9dbcdd9ffc045d41cc7d271677e71cc5c5a83ec50a020524d6c4e71f7a02600aca8e632d6793c02a5e1e4a79969baada177b59e82fe956d4fe4981fc664ebb22d55957aa000f8c1b15191a306645", 0x94, r4}, 0x68) ftruncate(r0, 0x11003) sendfile(r2, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 577.774418] binder: 17429:17430 ioctl c0306201 20000100 returned -14 [ 577.781862] binder: 17429:17431 ioctl c0306201 20000100 returned -14 08:40:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1767) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:10 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xd4b9dc7) unlink(&(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x1000108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000000)='./file1/file0\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) ftruncate(r0, 0x0) [ 577.817824] binder: BINDER_SET_CONTEXT_MGR already set [ 577.840258] binder: 17432:17434 ioctl 40046207 0 returned -16 [ 577.840260] binder: BINDER_SET_CONTEXT_MGR already set [ 577.840271] binder: 17436:17439 ioctl 40046207 0 returned -16 [ 577.854560] binder: 17432:17434 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 577.869919] binder: undelivered death notification, 0000000000000000 08:40:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) getpriority(0x3, r2) [ 577.889924] binder: BINDER_SET_CONTEXT_MGR already set [ 577.895423] binder: 17436:17447 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 577.898354] binder: 17436:17439 ioctl 40046207 0 returned -16 [ 577.912173] binder: BINDER_SET_CONTEXT_MGR already set [ 577.923224] binder: 17449:17450 ioctl 40046207 0 returned -16 [ 577.948319] binder: 17449:17450 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 577.964633] binder: BINDER_SET_CONTEXT_MGR already set [ 577.976674] binder: 17454:17455 ioctl 40046207 0 returned -16 [ 577.992262] binder: undelivered death notification, 0000000000000000 [ 578.007032] binder: undelivered death notification, 0000000000000000 [ 578.014477] binder: BINDER_SET_CONTEXT_MGR already set [ 578.019868] binder: 17454:17455 ioctl 40046207 0 returned -16 [ 578.021255] binder: undelivered death notification, 0000000000000000 [ 578.034141] binder: undelivered death notification, 0000000000000000 08:40:11 executing program 4: 08:40:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000400)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:11 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00\x00\x00\x00\x01\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00005b4000/0x2000)=nil, 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9, 0x2, 0x1800000000000000}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x1000008, 0x33, r0, 0x0) unshare(0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000000c0)) open$dir(&(0x7f0000000400)='./file0\x00', 0x80004, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(r4) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000b00)=""/4096, &(0x7f0000000240)=0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480)) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x80) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7e) ftruncate(r6, 0x2008200) r7 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) 08:40:11 executing program 4: dup(0xffffffffffffff9c) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x4) r1 = syz_open_pts(r0, 0x5ffffd) syz_open_pts(r0, 0x400) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000100)="2cab91ae1b82d4733b88724a4918a0d945571423aed39374137c7233643d846f0e6607d004fd10d2a079930298fd0c9d887a4b1efa34b0d85f58ea0040615415c3d68f75d132d7715e192f45fb8374b33a1758c9ba39085e123436db78d2b7b733c9a7e99e53b61d94c1432c9fd7761a15b00a9dfbd8e1fb1c09eb171e460327237ed31b960e1149bc1384c247c76f42da37b3affa6c1dc3adceb0fffe96a4f9fd4007144d1663e69d4f077eeda6065176ba55ccaf8a4c03082c482fee48f22118e3dc9b04c0a0f6fc21b816d5599e379618231c84e7698e855c03e5ded79d7c0e5f316e24308e623e28dafcfcb86808f3be9dcd0ca2") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r3 = accept$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000300)={0x2, 0x8, 0x0, 0x7ff, 0x9, 0xfff, 0x5, 0x100000000, 0x101, 0xef}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0xbf0, 0x89, 0x10001, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x8, 0x0, 0xbe00000, 0x6b3}, {0x100, 0x3, 0x6, 0xffffffffffff0000}, {0x7fffffff, 0x7, 0x7f0, 0x40}]}, 0x10) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x7e) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000380)=""/120) [ 578.353888] binder: BINDER_SET_CONTEXT_MGR already set [ 578.365812] binder: 17478:17482 ioctl 40046207 0 returned -16 [ 578.366447] binder: BINDER_SET_CONTEXT_MGR already set [ 578.377280] binder: 17486:17487 unknown command 3 [ 578.379923] binder: 17477:17484 ioctl 40046207 0 returned -16 [ 578.382997] binder: undelivered death notification, 0000000000000000 08:40:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 578.389983] binder: 17477:17484 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 578.397799] binder: BINDER_SET_CONTEXT_MGR already set [ 578.413824] binder: 17478:17482 ioctl 40046207 0 returned -16 [ 578.420060] binder: 17486:17487 ioctl c0306201 200001c0 returned -22 [ 578.438547] binder: BINDER_SET_CONTEXT_MGR already set [ 578.444126] binder: 17493:17495 ioctl 40046207 0 returned -16 08:40:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x5) 08:40:11 executing program 4: clone(0x8007fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10020020}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) read(r0, &(0x7f00000002c0)=""/52, 0x34) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80000) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000280)) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x1, 0x0, @mcast2, 0x9}, 0x1c) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x0, 0x5}) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e22, 0x6, @ipv4={[], [], @broadcast}, 0x4000000000001}, 0xff7e) mkdir(&(0x7f0000000180)='./file0\x00', 0x81) [ 578.444262] binder: undelivered death notification, 0000000000000000 [ 578.451224] binder: 17493:17495 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 578.503433] binder: 17486:17494 unknown command 4 [ 578.534667] binder: 17486:17494 ioctl c0306201 200001c0 returned -22 [ 578.544137] binder: undelivered death notification, 0000000000000000 [ 578.552163] binder: undelivered death notification, 0000000000000000 08:40:13 executing program 5: seccomp(0x1000000000000001, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x7fff, 0xc7b, 0x200000000058fe4}]}) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="35a36d509c0a5fc3e62ddb8fff714f2730080f0e9118ead2a38aebda5789f4bcc523f218ddd6fa143a4187a2df2501015484769fe94b9b288a335ab839009aaf1e01127a2ab5", @ANYRES32]) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) creat(0x0, 0x80000000000) 08:40:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000400)="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") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x3, 0x66, "60466e14076d9256c00b0e3533486de9cfc30376573cfa2202fddfd94490530bad7d59fa6b5140927858fec5a371fe8f06ae54cca659039843ca958ecdce5a93b9cba4891e9daae5b3df8ee4c638ee87104568c95420dcab1ab2fbb062313a75016b38ce0b4a"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) io_setup(0x8000, &(0x7f0000000100)=0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x80000, 0x0) io_submit(r1, 0x3, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000200)="2817ae12daa7408769a428008f54af428a4639678d356bd879fa61b229fd9b2051522947ecd16cc25f092304560a0d6d02d409a6fa348640967c9c1f335d0ee3b263ac3b1125e35c938670f24bfce3d52a87474ee290e69d8db34600bbcc340c46a976e109e8531431a79af61ef0198f768b961d8d11a24c5bc9d1ac352b7186f5cda3bd174608172d", 0x89, 0x80000000, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000300)="0661e9db6f2295f159b18a17a018aa95889b52ec71f742a8c272d4ad2110704666138809bdd2b53b3ee9b214c6e02beef293db031fa9abe4191058d3a71c13607ef266a3a46083b7a99718a89af001fd8f1d4e169a1976c684e47ed4718866f8a48578cf874fbfb7e6703d6e68f9ca945b5669c9f2b294898e68555f3f4ad2783b39d5df1eeaf7da451e118ab8b8", 0x8e, 0x3, 0x0, 0x2, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000400)="b0736c552c54e44740af91ad3a18bd57600e37c2d904f9b43cb5b0f593156ae39aee429efb8ae3648a0d18a13ffabba81e0a81b25177ab5c708db2e19908ccfd7ea00c2593d279e68b561b661940d2ed9dd37e446531995c0417bb0dcda6102e6d09dcfeae59fa4158c7a20aff832a19eb9c1de01e4c500845d8588916d67a414077d17c559c46d176a7a1793eb441ef0ee9e228cecbd76b572b56293d137ba91439956c5e4495d8a23467320b753e72ab3233cc921eeb1d712ed3426b0e021b7e573c", 0xc3, 0x9, 0x0, 0x2, r2}]) 08:40:13 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00\x00\x00\x00\x01\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00005b4000/0x2000)=nil, 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9, 0x2, 0x1800000000000000}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x1000008, 0x33, r0, 0x0) unshare(0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000000c0)) open$dir(&(0x7f0000000400)='./file0\x00', 0x80004, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x7fffffffe, &(0x7f0000000840)={0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00\x00\x05\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(r4) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000b00)=""/4096, &(0x7f0000000240)=0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480)) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x80) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7e) ftruncate(r6, 0x2008200) r7 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) 08:40:13 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='memory.events\x00', 0x0, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = syz_open_procfs(0x0, 0x0) unshare(0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000140)=""/180) creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x100, 0x0) clone(0x3f797656350e5994, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 580.863379] binder: BINDER_SET_CONTEXT_MGR already set [ 580.865371] binder: 17526:17530 ioctl 41009432 20000400 returned -22 [ 580.874610] binder: 17524:17527 ioctl 40046207 0 returned -16 [ 580.881065] binder: BINDER_SET_CONTEXT_MGR already set [ 580.887042] binder: 17526:17530 ioctl 40046207 0 returned -16 [ 580.889641] binder: 17524:17527 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 580.894035] binder: undelivered death notification, 0000000000000000 08:40:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 580.908715] binder: 17526:17530 ioctl 41009432 20000400 returned -22 [ 580.915443] binder: BINDER_SET_CONTEXT_MGR already set [ 580.920896] binder: 17526:17532 ioctl 40046207 0 returned -16 [ 580.934422] binder: undelivered death notification, 0000000000000000 08:40:13 executing program 4: io_setup(0x3, &(0x7f0000000100)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/143) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0xde79005f}]) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x3, 0x0) [ 580.988997] binder: BINDER_SET_CONTEXT_MGR already set [ 581.018022] binder: 17535:17539 ioctl 40046207 0 returned -16 [ 581.018025] binder: BINDER_SET_CONTEXT_MGR already set [ 581.018036] binder: 17538:17540 ioctl 40046207 0 returned -16 [ 581.035284] binder: 17535:17539 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ff, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x60800, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) ioctl(r1, 0xf7, &(0x7f0000000080)) syncfs(0xffffffffffffffff) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/validatetrans\x00', 0x1, 0x0) [ 581.060200] binder: BINDER_SET_CONTEXT_MGR already set [ 581.064370] binder: 17538:17546 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 581.074815] binder: 17538:17540 ioctl 40046207 0 returned -16 [ 581.092381] binder: undelivered death notification, 0000000000000000 08:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x220040, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x7, 0x70, 0x4, 0x25b1c922, 0x1, 0x6, 0x0, 0x7f, 0x80080, 0x8, 0x2, 0xf21b, 0x200, 0x0, 0x9, 0x40, 0x7fffffff, 0x0, 0x1, 0x3f, 0x8, 0xe0a, 0x9, 0x0, 0xfffffffffffffff7, 0x7fff, 0xfffffffffffffffb, 0x3, 0x3, 0x5fdd0000, 0x8, 0x9, 0x2, 0x7, 0x0, 0xdba, 0x401, 0xfffffffffffffffe, 0x0, 0x80000001, 0x0, @perf_config_ext={0x5, 0x80}, 0x29, 0xa0, 0x401, 0x4, 0x1, 0x4, 0x100}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) [ 581.116953] binder: BINDER_SET_CONTEXT_MGR already set [ 581.148853] binder: 17548:17553 ioctl 40046207 0 returned -16 [ 581.163869] binder: BINDER_SET_CONTEXT_MGR already set [ 581.186930] binder: 17557:17558 ioctl 40046207 0 returned -16 [ 581.187292] binder: 17548:17553 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 581.205464] binder: undelivered death notification, 0000000000000000 [ 581.225030] binder: BINDER_SET_CONTEXT_MGR already set [ 581.232864] binder: 17557:17562 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 581.244767] binder: 17557:17558 ioctl 40046207 0 returned -16 [ 581.260978] binder: BINDER_SET_CONTEXT_MGR already set [ 581.380278] binder: 17522:17566 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 581.440116] binder: 17522:17567 ioctl c0046686 20000040 returned -22 [ 581.680096] binder: 17522:17550 ioctl 40046207 0 returned -16 [ 581.990180] binder: BINDER_SET_CONTEXT_MGR already set [ 581.995659] binder: 17522:17567 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 582.050136] binder: 17522:17569 ioctl c0046686 20000040 returned -22 [ 582.370089] binder: 17522:17565 ioctl 40046207 0 returned -16 08:40:16 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1}}) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x19a) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r3, 0x3, 0x0, &(0x7f0000000240)) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r4, 0x0, 0x0, 0x4003ff) write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0x9) r5 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x802) io_setup(0x1, &(0x7f0000000100)=0x0) accept4$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14, 0x55ecb0cd7bc9e076) sendto$packet(r5, &(0x7f0000000480), 0x0, 0x40, 0x0, 0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000340)="52983a60e8020db4ccd4543efead016afefdde6c22ebbdcb24ea7f7a421798f93ef99e121afdb83db4921ee0c3faedb276264d6a410d3a4d5a0d593ed3964fcad4ecb02541b0f7b79beb3e3b420a1fe921f950c8a1291b89f87077274c8394ad19985fd71c5f8f2cda957789b1d368b4358a6e17a10c410fe173d2c1ef906cce3b6431c16875b56e252b4b7b928532584e50b336f59f244791e5590e4aa6c81c96ad0b8860292411622a8e9e72196e1206de", 0xb2, 0x3f, 0x0, 0x3, r4}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000004c0), &(0x7f0000000500)=0xc) fallocate(r4, 0x3, 0x1000000405e89, 0xfff9) sendfile(r2, r2, 0x0, 0x3) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) ioctl$void(r2, 0xc0045c79) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0x80000000, @loopback}}}, 0x88) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 08:40:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x80, 0x0) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @empty}, 0x204, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)='veth1\x00', 0x5, 0x552, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 08:40:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:16 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, 0x0, 0x2, 0x8) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="3caaaaaaaa07988f0c2c037e70d4"], 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) get_thread_area(0x0) r2 = gettid() request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) setsockopt$sock_int(r0, 0x1, 0x762692d679989c04, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000280), 0x9) wait4(0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0xf, 0x0, 0x0, 0x4208) ptrace$poke(0x4, r2, &(0x7f00000002c0), 0xfffffffffffffff8) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 583.888325] binder: 17581:17583 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 583.907006] FAT-fs (loop2): bogus number of reserved sectors [ 583.913117] FAT-fs (loop2): Can't find a valid FAT filesystem 08:40:16 executing program 1: socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000000000006}]}, 0x10) 08:40:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) 08:40:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) r1 = socket$inet(0x10, 0x10000000003, 0x9) sendmsg(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffe6, &(0x7f0000009ff0), 0x100000000000014f, 0x0, 0x39d}, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x81}, 0x28, 0x3) 08:40:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:17 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/checkreqprot\x00', 0x400000, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22}, {0x2, 0x4e1f, @loopback}, {0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x0, 0x8, 0x5, 0x46a, 0x0, 0x0, 0x0, 0x1}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a40)) sysinfo(0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000780)) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x200000023e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000004c0)) write$eventfd(r4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000068d600000000b6"], 0x10}}, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x5, 0x8, 0x2, 0x1ff, 0x0, 0x4f8, 0x1804, 0xb, 0x7, 0x8, 0x8001, 0x5, 0x7, 0x4, 0x6, 0x1, 0x6d87, 0x3, 0x8, 0x4, 0x6, 0x100, 0x2e5, 0x8000, 0x0, 0x4000800000000, 0x9, 0x3, 0x0, 0x3, 0x96, 0x4, 0x6, 0x6, 0x101, 0x8, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000180), 0x1}, 0x4240, 0xfffffffffffffffc, 0x9, 0x7, 0x100000000, 0x5}, r3, 0xe, r1, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000001c0)=""/53, &(0x7f00000002c0)=0x35) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000007c0)=""/36) 08:40:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 584.426408] binder: 17618:17620 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 584.462772] binder: undelivered death notification, 0000000000000000 [ 584.483619] binder: undelivered death notification, 0000000000000000 08:40:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xfee1, &(0x7f0000000200)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000340)={0x14, 0x13, 0x1, {0x4, 0x1, 0x6}}, 0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r2, 0x3, 0x1, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)=[0x38, 0x20, 0x18, 0x38]}}, @acquire={0x400c630e}], 0x94, 0x0, 0x0}) ptrace$getenv(0x4201, r1, 0x7fff, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r1, &(0x7f0000000040), 0x1000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="1b00000025001f0fff07f4f9000201000000000000000000000000", 0x1b) [ 584.662403] binder: 17671:17673 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 584.707543] binder: 17682:17683 got transaction to invalid handle [ 584.715620] binder: 17682:17683 transaction failed 29201/-22, size 0-0 line 3012 [ 584.723979] binder: 17682:17683 ioctl c0306201 20000040 returned -14 [ 584.733612] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.740440] binder: 17682:17689 got transaction to invalid handle [ 584.746785] binder: 17682:17689 transaction failed 29201/-22, size 0-0 line 3012 [ 584.754919] binder: 17682:17689 ioctl c0306201 20000040 returned -14 [ 584.763237] binder: undelivered TRANSACTION_ERROR: 29201 08:40:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x386, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140081000000000000000000ff010000000000000000000100000001e000000100000c000000000000000000000000000000000002000000000000004f78358de7ca41643bb9d02fe778696a74b87f3ee7b43cd24e3f74c3c4d814944419328393ef57c9038ed079ae01b1651b2d0f73e12a5ff24c75e533b87fa4e7887e817a116a1899a1f1db1dc2e09429b94357fc75fb7b9cdc4b4603f02df4034c414602a3c3d222a87670d2c0a0f234ceef0ac2a31f2f0def7d4d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000200)={0xe, 0x120b, {0x54, 0x6, 0x6, {0xffffffff, 0x1}, {0x3, 0x6}, @cond=[{0x4f9d, 0x5aab, 0x10000, 0x7ff, 0x7, 0x3}, {0x7ff, 0x4, 0x1, 0x1, 0x7f}]}, {0x57, 0x20, 0x8, {0x80, 0x40}, {0x2, 0x401}, @period={0x58, 0xcc, 0x8001, 0x100000001, 0x1f, {0xffff, 0x5, 0x6, 0xf78}, 0x9, &(0x7f0000000040)=[0x1ff, 0x1, 0x10000, 0x539, 0x6, 0x3, 0xcf, 0x5, 0xfffffffffffffffc]}}}) fcntl$setflags(r0, 0x2, 0x1) 08:40:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x1000000000003, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000180)=0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast}, 0xc) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) setsockopt$inet_mreq(r2, 0x0, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="00062dbd7000ffdbdf25090000001400020808000100ac7d000008000200000000000c000900080002002dff98ff1e2a09000800020003000000080001000700000008000200ff0000001400060000080001003900000000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$LOOP_CLR_FD(r1, 0x4c01) io_setup(0xff, &(0x7f00000005c0)) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f00000009c0)=""/135) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") close(r6) sendfile(r1, r1, 0x0, 0x2000005) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x80, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000200)={0x28cc, 0x40, 0x8, 0xd5b6, 0x3, 0x148b5da7, 0x6a61, 0x40, 0x6, 0x7fffffff, 0x8, 0x2}) futex(0x0, 0x8b, 0x0, 0x0, 0x0, 0x2) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) 08:40:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x3000, 0x10, &(0x7f0000000100)) 08:40:19 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:19 executing program 1: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)) r0 = getegid() setgid(r0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) setgid(r1) uname(&(0x7f00000001c0)=""/105) 08:40:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r3 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0x0, 0x4e23, 0x6, 0xa, 0x0, 0x20, 0x3b, r1, r3}, {0x1, 0xfffffffffffffff9, 0x31, 0x6, 0x6, 0x4, 0x2, 0x800}, {0x6, 0x0, 0xa52a, 0x5}, 0x7, 0x6e6bb4, 0x3, 0x1, 0x3, 0x1}, {{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in6=@rand_addr="8687d7fbaec0cd6d9defe28f04d90ad2", 0x0, 0x0, 0x0, 0x2, 0x7fffffff, 0x6, 0xfffffffffffffc06}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in=@loopback, @in6=@rand_addr="e1bed7c1718fda3b7bbc579b2bb1537a", 0x4e20, 0x400, 0x4e21, 0x7, 0x2, 0x20, 0x20, 0xc, r1, r2}, {0x200, 0x0, 0x8c, 0x100, 0x7, 0xfffffffffffffffa, 0x80, 0x4}, {0x100000000, 0x3, 0x1, 0x8}, 0x1, 0x6e6bb3, 0x1, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d5, 0x7f}, 0x2, @in6=@mcast1, 0x3505, 0x3, 0x3, 0xaa9, 0x5, 0x8000, 0x7fffffff}}, 0xe8) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)=0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) 08:40:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000003d00), &(0x7f0000003d40)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000003000000950000000000f4000010d2445f4bbf9c9b119bbbecef5cc5c2ff593483153db52affbf8768a3a4a035659ff316db975dabd7f00cb52961f88b71655a664ee3dd3bba5e84c01a261c6285f6fa34398fd18e085e34a54a"], &(0x7f0000003ff6)='GPL\x00', 0x1000000000000004, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 586.903873] binder: 17745:17748 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 586.924140] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 08:40:19 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:19 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)=0x400000) unshare(0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) getpid() mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) write(r1, &(0x7f0000000040)="8931be086d8eff0a48eef3d08c870aeb17f0d613ed13a3974a3c0dc23add1f41d21e5cf874fefc26c5e52ae0345f71912682a460ae6493701b4df1ead3", 0x3d) accept4$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x2, 0x0, @initdev}, &(0x7f0000000f00)=0x10, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@dev, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) getuid() stat(&(0x7f0000004e80)='./file0\x00', &(0x7f0000004ec0)) fstat(r0, &(0x7f0000004f40)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004fc0)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, 0x0) getgroups(0x2, &(0x7f0000005100)=[0xee01, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005140)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000005240)=0xe8) lstat(&(0x7f0000005280)='./file0/file0\x00', &(0x7f00000052c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000054c0)={{{@in6, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005600), &(0x7f0000005640)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000005480), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x16f}], 0x1, 0x40004) [ 586.961073] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 08:40:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58114347b289546465a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00000000000000000000000000000000", 0x82, 0xc085, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in6=@mcast1}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)='+', 0x1, 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x101000, 0x0) fcntl$notify(r1, 0x402, 0x2) [ 587.013441] binder: 17767:17769 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:19 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x400, 0x8}, 0x2c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) setuid(r2) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00') ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000000c0)=0x100000000) sendto$packet(r3, &(0x7f00000003c0)="25dff777bb6d2f27195b395719bf377793d83e10b832b9a536475c08f38f79a322fef7c6cb6d843789926b5dfe17668aef336f6c474d49632e9d3d1b481d34b5ca2423", 0x43, 0x8040, &(0x7f0000000440)={0x11, 0x0, r1, 0x1, 0x7ff, 0x6, @remote}, 0x14) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x40000) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0) rt_sigprocmask(0x3, &(0x7f0000000100)={0x5}, &(0x7f0000000140), 0x8) [ 587.095990] binder: 17782:17785 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 587.108630] binder: 17787:17788 ioctl 4004556e 8 returned -22 [ 587.128446] binder: undelivered death notification, 0000000000000000 [ 587.138264] binder: 17787:17788 ioctl 4004556e 8 returned -22 [ 587.145034] binder: undelivered death notification, 0000000000000000 08:40:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x50000}]}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) syz_execute_func(&(0x7f0000000280)="0faef24029450ff3440f1157f19143a1a00f9e0000000000c4627d597f8b54aa400f34c30fb11d0039804167640f71f6452b610dc29004f34c0f38f6a30a00000000008fcd78a30000d45ec31e0ff7c6") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r3 = getpgid(0xffffffffffffffff) tgkill(r2, r3, 0x2e) 08:40:19 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:19 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x410000, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000300)) r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x5, 0x0, 0x7}}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc'], 0x35f8c524eb552c4a, 0x0, 0x0}) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x9b, 0x108000) syz_emit_ethernet(0x62, &(0x7f0000000200)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "4eba8d", 0x7, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @ipv4={[], [], @empty}, {[], @tipc=@payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x800) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$inet(r5, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000), 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190e0000000000000e6d2c67dc82400000000061669754d8601b25"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f00000001c0)) 08:40:19 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='smaps_rollup\x00') openat(r1, &(0x7f0000000040)='./file0\x00', 0x24000, 0x4) 08:40:19 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x408200, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x8000, 0x0) renameat(r0, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)=0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xffffffffffff0001, 0xe68, 0x1f, 0x5, 0x0, 0x800, 0x200, 0x2, 0x400, 0x100000000, 0x1, 0x80, 0x7c, 0x800, 0x7, 0x1, 0x42, 0xffffffff, 0x9, 0x401, 0x1000, 0x9, 0x7fffffff, 0x4, 0x0, 0x6, 0x2, 0x1, 0x3, 0x4, 0x100000000, 0x81, 0x100000001, 0x9, 0xaa, 0xffffffff, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x82602d5eef39c35c, 0x5, 0xe65, 0x5, 0x81, 0x5, 0x1}, r3, 0xffffffffffffffff, r4, 0x2) r5 = dup2(r2, r2) close(r5) ioctl$TIOCCBRK(r4, 0x5428) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="736563676974792e6e6f6465766b0000000000000000ba99ed"]) 08:40:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x410080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1d) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) times(&(0x7f00000002c0)) syz_open_dev$rtc(&(0x7f00000001c0)='/dev/rtc#\x00', 0x8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000200)='./file0\x00', r4, r5) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x20, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1a9d7877, 0x0, 0x417d, 0x237, 0x4, 0x5, 0x0, 0xffffffff00000001, 0x3ff, 0xfffffffffffffff8, 0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffff9c, 0x0) getpid() getpriority(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 08:40:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 587.212163] binder: 17798:17800 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:20 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) request_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x84300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x20) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000140)="c8829d01cf4d49f6db652844e2b873ed0723") r2 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) openat$zero(0xffffffffffffff9c, 0x0, 0x80100, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) readahead(0xffffffffffffffff, 0x0, 0x0) 08:40:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 587.259801] binder: 17807:17810 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 587.327746] binder: 17809:17819 ioctl c0306201 200000c0 returned -14 [ 587.337838] binder: 17817:17818 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:20 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) r0 = getpid() r1 = syz_open_procfs(r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0xfffffffffffffd94) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x2f, 0x4, @thr={&(0x7f0000000100)="0aa4c8f385c9a0433b80eb3956ce13993dce64620e200161cd16440a0eac4e167eadadf4fe7784876c86777177b780aaee9b81ece93ea859120227cd3041d0320e6e31e21d98cb40b1fada45c2", 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x200327da) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 08:40:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x2) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000080), &(0x7f0000000100)=0x4) 08:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2001e, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000100)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 08:40:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:20 executing program 1: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000000)=0x6e, 0x800) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) getpgid(r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000500)=0x949, 0x4) sendmmsg(r4, &(0x7f00000002c0), 0x400000000000174, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') syz_genetlink_get_family_id$ipvs(0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0xfffffffffffffffa, 0x4) read(r1, &(0x7f0000000140)=""/165, 0x1000000eb) [ 587.868226] binder: BINDER_SET_CONTEXT_MGR already set [ 587.874719] binder: 17832:17835 ioctl 40046207 0 returned -16 [ 587.881052] binder: 17833:17839 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 587.895402] binder_alloc: 14939: binder_alloc_buf, no vma [ 587.902892] binder: 17832:17835 transaction failed 29189/-3, size 0-0 line 3135 08:40:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 587.926175] binder: 17832:17835 ERROR: BC_REGISTER_LOOPER called without request [ 587.942859] binder: 17843:17845 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 587.972647] binder: undelivered death notification, 0000000000000000 [ 587.985101] binder: 17848:17850 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2f1, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 588.033598] binder: 17853:17855 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 588.034813] binder: 17846:17854 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 588.102911] binder: 17857:17860 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 588.118445] binder: 17863:17864 unknown command 0 08:40:20 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x422, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)) 08:40:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 588.144642] binder: 17863:17864 ioctl c0306201 200001c0 returned -22 [ 588.185920] binder: 17869:17871 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 588.219667] binder: 17863:17867 unknown command 0 [ 588.229133] binder: 17863:17867 ioctl c0306201 200001c0 returned -22 [ 588.248906] binder: undelivered death notification, 0000000000000000 [ 588.261479] binder: undelivered death notification, 0000000000000000 [ 588.661251] binder: BINDER_SET_CONTEXT_MGR already set [ 588.666712] binder: 17832:17880 ioctl 40046207 0 returned -16 [ 588.673679] binder_alloc: 14939: binder_alloc_buf, no vma [ 588.679368] binder: 17832:17881 transaction failed 29189/-3, size 0-0 line 3135 [ 588.687785] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.693832] binder: undelivered TRANSACTION_ERROR: 29189 08:40:21 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x20) 08:40:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x1000040c2, 0x2) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000100)={0x9, 0x6, 0xffffffff, 0x1}, 0x10) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x10000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) fcntl$getown(r1, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/121, 0x79}, {&(0x7f0000000280)=""/53, 0x35}], 0x5, &(0x7f0000001e80)=""/142, 0x8e}, 0x8000}, {{&(0x7f0000001f40)=@caif=@dgm, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001fc0)=""/139, 0x8b}, {&(0x7f0000002080)=""/251, 0xfb}, {&(0x7f0000002180)=""/153, 0x99}, {&(0x7f0000002240)=""/113, 0x71}], 0x4, &(0x7f00000022c0)=""/103, 0x67}, 0x6}, {{&(0x7f0000002340)=@caif=@dbg, 0x80, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/221, 0xdd}], 0x1, &(0x7f0000002500)=""/133, 0x85}, 0x1}, {{&(0x7f00000025c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002640)=""/106, 0x6a}, {&(0x7f00000026c0)=""/255, 0xff}, {&(0x7f00000027c0)=""/134, 0x86}, {&(0x7f0000002880)=""/7, 0x7}, {&(0x7f00000028c0)=""/185, 0xb9}, {&(0x7f0000002980)=""/212, 0xd4}, {&(0x7f0000002a80)=""/176, 0xb0}, {&(0x7f0000002b40)=""/55, 0x37}, {&(0x7f0000002b80)=""/45, 0x2d}], 0x9, &(0x7f0000002c80)=""/155, 0x9b}}, {{&(0x7f0000002d40)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000002dc0)}, 0x401}, {{&(0x7f0000002e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002e80)=""/161, 0xa1}, {&(0x7f0000002f40)=""/214, 0xd6}, {&(0x7f0000003040)=""/216, 0xd8}, {&(0x7f0000003140)=""/70, 0x46}], 0x4, &(0x7f0000003200)=""/139, 0x8b}, 0x2}], 0x6, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003440)={0x10, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000001}, [@map={0x18, 0xb, 0x1, 0x0, r1}]}, &(0x7f0000000240)='syzkaller\x00', 0x200, 0xfd, &(0x7f00000004c0)=""/253, 0x41000, 0x1, [], r2}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x5a, 0x0, &(0x7f00000002c0)=""/90, 0xffff}, 0x28) getresgid(0x0, 0x0, 0x0) geteuid() ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000380)) fcntl$getown(0xffffffffffffffff, 0x9) getegid() getpid() getpgid(0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e24, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, 0x0, 0x1f, 0x0, "30bdb41bde1b01164ed115af8cda04f017fd9c81b83b1aa56f39e4e97f6f9261973c8dc1c7bcde442103b131bcc63f8392107662f3835ad175762a93e4ce867f99b7a40b39567c2d3543a6ed68e06822"}, 0xd8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3ff, 0x7}, 0x14) 08:40:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) set_thread_area(&(0x7f0000000040)={0x54db, 0x20000000, 0x400, 0xfd58, 0x8, 0x8, 0x7f, 0x7fff, 0xb8, 0x10001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r1, 0x16) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) 08:40:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) ptrace$getenv(0x4201, r2, 0x7, &(0x7f0000000000)) fcntl$setstatus(r1, 0x4, 0x42803) 08:40:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffdc6) socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f00000002c0)='trusted\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="8d0135a28caf3daae8a82061d5261254392b9b1d430f11981d75333f", 0x1c, 0xfffffffffffffffc) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="85a4239476e55f7ee881af7ce36d80a143a5a13cf11838c4ca10776a572249f06dfdaf888d8c3dd8e6adc12e193759945fca5e9b3ba19e031ed00a4fc73ada0520fcc214eec16488e882de2caf3844b8d0e77ba9689465fbc3bc4dac386694c886cc3638c3cd67b8d2f63b370c4030aed446b6f87ad94538b2d5b82ffa737a503913e55909f63ac74ffaa6e4f3742e211fb1b1598a1f221cd12726e4713cab2aa2324d9efef8b321b644b4c33476d5364870503a248f3d0744620f1db40f1817bf9eed6f13b52a7db44ef0ce0b03ad7c85e1fcf1147aa39c0a895b9abd215460cba1ca06046398c2cfbd590d2648878a7a540ece3c13c51b091b300bc3cb90", 0xff, r1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x3f) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x810005, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x5}, 0x28, 0x1) 08:40:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 588.789560] binder: 17887:17894 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 588.803037] binder: BINDER_SET_CONTEXT_MGR already set [ 588.816950] binder: 17893:17897 ioctl 40046207 0 returned -16 08:40:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x3, 0x0, @dev, 0x6}, 0xfffffffffffffd0a) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) [ 588.853299] binder: 17893:17903 ioctl c0306201 0 returned -14 [ 588.878432] binder: BINDER_SET_CONTEXT_MGR already set 08:40:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="446bd74283b8000000", @ANYRES16=r3, @ANYBLOB="080027bd7000fedbdf2507000000080005000100000038000100080004004e24000008000b0073697000080004004e20000014000300e00000020000000000000000000000000800050002000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000891}, 0x4008040) ioctl$KDSETLED(r0, 0x4b32, 0x3ff) readahead(0xffffffffffffffff, 0x3, 0x7) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000300)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r4) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000340)) arch_prctl$ARCH_SET_GS(0x1001, 0x0) sched_setaffinity(r4, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2, 0x0, @rand_addr, 0x80000000000}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0xfffffffffffffdea) r5 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4000801) fsetxattr$security_smack_entry(r2, 0x0, 0x0, 0x30, 0xfffffffffffffffd) write$cgroup_type(r1, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) getpeername$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) 08:40:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) rmdir(&(0x7f0000000500)='./file0\x00') sendto$unix(r2, &(0x7f00000005c0)="d2eb099451c03be717ade37e3f667b10013e175c7a6abb29692b2cc0f427f93eb74bc4e21423096a13436d10919ffb446d5a8bc66d0ec0f96c51b5b6cb4de78bf4b3fb8760d48e1e9c1f69c6ce0e016b752a6e3b2bbf2f9cfd3fef8958ee712337a70ae81e2e02f90f3d777202a4a64054c39cf68b2af53049c3d018a644c84a66cc79911420821592ae79c8e7e22c942a4abfbb15f440a99b6d66cc23c4a12021aef8858ecc39b2379de77171d7e25fbee1f69a7ca40857d8a9f5eb157ee9a1b5bc", 0xc2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8001) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) keyctl$link(0x8, r6, r0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000480)={{0x0, 0x1, 0x7, 0x2, 0x8000}, 0x1000, 0x6}) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x20200, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000540)=0x0) getgroups(0x3, &(0x7f0000000ac0)=[0xee01, 0xee01, 0x0]) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000b00)=0x0) r13 = getegid() fcntl$getownex(r1, 0x10, &(0x7f0000000b40)={0x0, 0x0}) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000c40)={0x0}, &(0x7f0000000c80)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, &(0x7f0000000d00)=0xc) r18 = fcntl$getown(r4, 0x9) fstat(r4, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000010c0)={0x0, r1, 0x0, 0x9, &(0x7f0000001080)='\'md5sum(\x00'}, 0x30) lstat(&(0x7f0000001100)='./bus\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001280)=[{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000007c0)="fddb4aea70813be456d6f680f03ec87c9cf51aeec32f26c06d030f624c484afc4459f9a763c7b9657bed24d2823798d46f783b09bd696ca35fe1c8d0f928a7b3ae1060a869f35157d9ea05251033f9a78da57e1e96e313f7f48efc3e69e8c35ba57d43b33f12c95ef3024c08098d9f159e6bdaa8d4e24b4a3f093f6e30f3ea21fcfc9f4e558175286acc18", 0x8b}, {&(0x7f0000000880)="6a03e65cc72ab1e131193990bcb241a3e9e68f091f17fd7140ecaf03ff66629be3319f84342aa8f1c697ddfae069a2bdfa2a42ef18b2b322beb9a4457cf2de38139744661388e4e12a87667a1b8b1a1e72f83ab2ff0723d6db0c29df19a970180df3ffd6afa34540150b0c64279808ed03016bb19b483a53e1f14c393c7c96d9dfbc321c4e7e9e50c7f184fe9132bf47fc5f37bc69ebea31dc67f3e20e8cdd4dc38c8435677728ddde472961a765b3aaf6fced0361cb85f1e575e54a47ff32cbefd958e062a9eb8ed349", 0xca}, {&(0x7f0000000980)="344d2a8e33ffa664b6952abb5208adc1b6e3a0302064990cbc576210c125bf70d04093200b729d824132c416bab7875689d15e91283c451ad40420a598451115cda7db57b64d81dd6e877ed6018f0f5601d668e3c7362c", 0x57}, {&(0x7f0000000a00)="b08d512b03e42a0decc9e9b2e10a3298b77671528c10ad366134ffcf5c0a0a554d842c9dfef1d00dde1e83f973dfcdea099c33c676c34097ce5877478eff8a3d9af20ec18b0224f04c57f4504ea05084b3a3bb6ad2ad13d54ba7963ebf063ce551a6cd3d511b5a18fa9dc8bb2cd5b81ec3f70cea32b1566c1ca7b65f111352f7803bb1", 0x83}], 0x4, &(0x7f0000000d40)=[@cred={0x20, 0x1, 0x2, r10, r7, r11}, @cred={0x20, 0x1, 0x2, r12, r7, r13}, @cred={0x20, 0x1, 0x2, r14, r7, r15}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r16, r7, r17}], 0x90, 0x40000}, {&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e80)="0a4a12ba44f9922c92e12eceb4b99a484b5d8605becb74df15e2685f183628d38c65910bd93b0d29a5b1c74e1563666bd56f394e2bf6bdfc5898007703c4a7619a192c40a18dd94f0e8a0903226824f219f727b0f8d48e6f75dee792047f59c224de0b64a3ed5bc2bb21aae0d5694e6258f0ed57b0469cfed55593e5792b3190144dc0e37f8a1ba1526b1f9a46d9129b9f4615da7f845090d5818cc083369d0ded7d77", 0xa3}, {&(0x7f0000000f40)="601ab9282250373710be0f3441c3484c81d8b87405d7cebca42a9fba3ed11ccca03249bf761643af803164bb000e83a5c3", 0x31}, {&(0x7f0000000f80)="86bd2f250f851db2e51a84ff6ec747eb13ef0229ad8acfb2a5f6ebff5189be30d782b81100b8bc9d0dc7f872b106cf45", 0x30}], 0x3, &(0x7f00000011c0)=[@rights={0x10}, @cred={0x20, 0x1, 0x2, r18, r7, r19}, @rights={0x20, 0x1, 0x1, [r9, r8, r3]}, @rights={0x20, 0x1, 0x1, [r5, r5, r1, r9]}, @cred={0x20, 0x1, 0x2, r20, r7, r21}], 0x90}], 0x2, 0x40000) ioctl$int_out(r5, 0x0, &(0x7f0000000240)) r22 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f00000006c0)={{0xffffffffffffffff, 0x0, 0x2973, 0x0, 0xffff}, 0x80000000, 0x9}) bind$inet6(r8, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r22, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r22, 0x6, 0x18, &(0x7f00000001c0), 0x4) r23 = open(&(0x7f0000000100)='./bus\x00', 0x900000141042, 0x0) ftruncate(r23, 0x10099b7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000002c0)) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r8, r23, 0x0, 0x8000fffffffe) connect$unix(r22, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 588.901529] binder: 17907:17909 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 588.914911] binder: 17893:17903 ioctl 40046207 0 returned -16 [ 588.923035] binder: 17893:17897 ioctl c0306201 0 returned -14 08:40:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 589.022009] binder: 17921:17923 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 589.051717] binder: 17916:17925 unknown command 25388 [ 589.059476] binder: 17916:17925 ioctl c0306201 200001c0 returned -22 08:40:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 589.091282] binder: 17916:17930 unknown command 25388 [ 589.098583] binder: 17928:17929 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 589.121080] binder: 17916:17930 ioctl c0306201 200001c0 returned -22 [ 589.140470] binder: undelivered death notification, 0000000000000000 [ 589.151833] binder: undelivered death notification, 0000000000000000 [ 589.170148] binder: 17936:17937 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:22 executing program 5: mkdir(&(0x7f0000001340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000003380)=""/4096, 0x723) getdents(r0, &(0x7f0000000000)=""/79, 0x4f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:iptables_exec_t:s0\x00', 0x25, 0x1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xc) recvmmsg(r3, &(0x7f0000002d00)=[{{&(0x7f0000000380)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/86, 0x56}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6, &(0x7f00000007c0)=""/129, 0x81}, 0x9}, {{&(0x7f0000000880)=@x25, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000900)=""/152, 0x98}, {&(0x7f00000009c0)=""/150, 0x96}, {&(0x7f0000000a80)=""/174, 0xae}, {&(0x7f0000000b40)=""/225, 0xe1}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000d40)=""/161, 0xa1}, {&(0x7f0000000e00)=""/68, 0x44}, {&(0x7f0000000e80)=""/251, 0xfb}, {&(0x7f0000000f80)=""/86, 0x56}, {&(0x7f0000001000)=""/147, 0x93}], 0xa, &(0x7f0000001180)=""/82, 0x52}, 0x182cb64c}, {{&(0x7f0000001200)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)=""/27, 0x1b}, {&(0x7f0000001380)=""/194, 0xc2}, {&(0x7f0000001480)=""/132, 0x84}], 0x3, &(0x7f0000001540)=""/130, 0x82}, 0xb2d}, {{&(0x7f0000001600)=@ipx, 0x80, &(0x7f0000001800)=[{&(0x7f0000001300)=""/17, 0x11}, {&(0x7f0000001680)=""/40, 0x28}, {&(0x7f00000016c0)=""/199, 0xc7}, {&(0x7f00000017c0)=""/39, 0x27}], 0x4, &(0x7f0000001840)=""/172, 0xac}, 0x7f}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001900)}, {&(0x7f0000001940)=""/35, 0x23}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/232, 0xe8}, {&(0x7f0000002a80)=""/183, 0xb7}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/146, 0x92}], 0x7, &(0x7f0000002c80)=""/108, 0x6c}, 0xfffffffffffffff8}], 0x5, 0x2000, &(0x7f0000002e40)={0x77359400}) connect(r1, &(0x7f0000002e80)=@xdp={0x2c, 0x4, r4, 0x2a}, 0x80) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000340)=0xc723) getdents64(r0, &(0x7f0000000200)=""/246, 0xf6) 08:40:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept(r0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000180)=0x80) r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x6948ad68e58744b8, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000300)={0x5b447d9, {0x0, 0x800, 0x8fff, 0xfff, 0xffff, 0x1000}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x3) 08:40:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) r1 = dup(r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x18) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) mlock(&(0x7f0000b9e000/0x4000)=nil, 0x4000) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) request_key(&(0x7f0000000340)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='b\x02o\x00H\xff=]\xa3l\xb3e\x0f\xac\x028\xa9mLK-\xc5\xa2\xcc}\xa9', 0x1a) getgid() sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x6, 0x9}) pipe(0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) clock_getres(0x1, &(0x7f00000000c0)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xce991b369655c61c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_FPEMU(0xa, 0x3) 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 589.311213] binder: 17946:17948 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:22 executing program 5: clone(0x7ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f00000004c0)='\x06\x00\x00\x00\xffro\x00\x00\x00\xbb2\xa4?<\x97_\xbdo\xa8\xaf\x14*\xc1\x8eP\x14P\f\x87\xcc\x84=\xc3G\xed\x1b m\xc6\xa3D\xa1\xf5>u-\x1c\aSp\x80\x0e9\x95\xe3,') socketpair(0x8, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000140)) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000240)=0xffffffffffffffe1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioprio_get$uid(0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ptrace(0x10, r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x28, &(0x7f0000000100)}, 0x10) ptrace$getsig(0x2, r3, 0xffffffffff600003, &(0x7f0000000280)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 589.358662] binder: 17954:17955 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 589.415318] binder: 17961:17965 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 589.473556] binder: undelivered death notification, 0000000000000000 [ 589.482123] kauditd_printk_skb: 39 callbacks suppressed [ 589.482132] audit: type=1400 audit(1550997622.226:180): avc: denied { associate } for pid=17956 comm="syz-executor.0" name="binder0" dev="devtmpfs" ino=1479 scontext=system_u:object_r:policy_src_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 589.484251] binder: undelivered death notification, 0000000000000000 08:40:22 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x89c, 0x5, 0x9, 0x7, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x1a, &(0x7f0000000300)=ANY=[@ANYBLOB="7361aaaaaabbaaaa09000000c828000000000004ba6eb70000cb5cf7f360c2d02ff2e8db6912ce48e9be5edcdbcf99f10e0159eabe493e9fdb3cf76adecfe786a6a7951e19aec575f3aa6624669754484ace411736d1ac2ba4185fa928e6b3c9dc67123f2fdd19815ac8e84b471ca8382a9673dce4dd3e8053875fff5a6c670497fc084b6f841d35cf1f631e21517bfbc2d44a93f5a3305cb9de4b240deffb9fda313248c6226daec15c04016041e82565579f46dd9547eaeccf377429e79f5f28cac4bf78d7f32fa5c696382f21d0c274755584c10f576dacdb961284c2d1758c32cef49d9713f9e7210281ac07b0dc235edd013bb6b3"], 0x0) 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:22 executing program 1: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x80, 0xf9) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100), 0x4) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x8cb42, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x2, 0x4, 0x8}, 0x57aa}}, 0x18) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/99, 0xffffffffffffff0c}, {&(0x7f0000000140)=""/5}, {&(0x7f0000000180)=""/231}, {&(0x7f0000000280)=""/53}, {&(0x7f00000002c0)=""/69}, {&(0x7f0000000340)=""/252, 0x277}], 0x1) 08:40:22 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000380)='s6\xcb0cm_u:o\x00\xffect_r:dp\xccR~G8\'\rf4:s0\x00\xa5\x8d\xa0\xcd\xcf@\x16Y\x1am\x9d\x1e\x10\x9f\x99ty\xca\xa4\xc8\x92\xb9\x05L\x8d\xb8\xf6\x00\xb7\x04\x97g\xc3\xdc\xe0{\x98\xf0Y\xdd\xea\a\xc6\xf2\x97\xe9\xd59\xd6\xb5\xc1+\xdfl%\xca{^\xfae\xb8\xec\xa4\xda\xb9\xe6\xf8\xaaBA\x86i\xcf\x9d-Si\xdb\x80\t<\xaa\x8a\x9e\x1b\x03S\xcd\x13\x7f\x83\xdc\x92\xdb\xc1H\xa0\xb2\xc0>\xc5\xf3\xb9\x0e8\xf4\xc2\xbd\xfc\x98\x06\xd3\x85X\x84o(\x11\xbd\x10X?\xc05W\x8cL\xb6\xd8\xca\xf7Zs\x19+`\xb0HU.\xc8J\xe4Tj\xe9\xd200\x99\xe5:\xa8\xd5\x87\x04\xc0\xd5\x86\xa6\xe6w\xb3\xf8}0\xc2\xc6\xe9\xfc\xd2\xd3\x19\xdcP\xcf}i\xc1\x99\xc9y\xc8j#\xb6\xed\xb4\xd594\x8dQ\x8d\xa1\xac\xb3\xc0\xe0\xd4\xd7\xcb8\t\x00\f\x15\xfc\x19 \xdf\x04\x89\xd2g`f\x83%\x9e\xa8R\xaet\xe2\xaf\t\x8bZZ1\\\xde8t\xc0\x02^t\xdd\x91\xf7\xe5m\xb2\xd1V2b+\x80\a\xc5/\x18\xd1\xa4\xbd\x93\xe6\xd239 \x9c\x1e\x04\x01Bm\xffB\x02|\xbc1\"\xd3\xecb\x91\xfb;\x1c\xefT\xf5^D\xc6x\xb8\xc0v\xad\xa0\xb2rp|(\fC\xfe\xceM\xd3\xec\xa0\xb7F.\x92\x9e\xa9Wjxw\xcc\xf5\xb6.\x86p\xcf\rp\xc9!\xfa\x1f\xfd\x89i*\xe0\xf2\xb0K\xc7\xd0\xee\xc7r\x99\xae\vs\xd4F\xd9\xd6\xf9\xb4\xd2\x15\x8b\xfbP', 0x189, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) r1 = open(&(0x7f0000000100)='./file0\x00', 0xc00, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) 08:40:22 executing program 0: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) r1 = dup(r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) 08:40:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x101, 0xfffffffffffffda1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 589.834998] binder: 17982:17984 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:22 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x12040, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @remote}, &(0x7f0000000180)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file1\x00') fcntl$setpipe(r1, 0x407, 0x89) 08:40:22 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000800)={0x3, 0x0, 0xa104, 0x6, 0x100000001}, 0xc) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8001200}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300200009d587486b84471219dc4224ee4a0e9a10305791498d0f744291b195a3e5e4f11", @ANYRES16=r2, @ANYBLOB="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"], 0x230}}, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) r4 = getpgid(0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e23, 0x100000000, @loopback, 0x2d019d76}, {0xa, 0x4e24, 0x5089be4e, @mcast2, 0x4}, 0x80000001, [0x0, 0x7, 0x5ec70c33, 0x40, 0x5, 0x30000000000000, 0x3, 0x1]}, 0x5c) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f00000009c0)={0x364, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x700000000000000}]}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4000000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x83a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb04e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x451}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x414}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @local, 0xfffffffffffffff8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2de}]}]}, 0x364}}, 0x4040000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@mcast1, @in=@local}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000940)=0xe8) waitid(0x2, r4, &(0x7f0000000180), 0x40000000, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000480)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r5, r6) getpriority(0x1, r4) 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 589.881470] binder: 17991:17993 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 589.894580] SELinux: Context s6Ë0cm_u:o is not valid (left unmapped). 08:40:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000040c0)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f00000041c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000004200)={@mcast1, 0x76, r2}) sendmsg$key(r0, &(0x7f0000000100)={0x2, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xffff0020, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) getpeername(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000000c0)=0x7fffffff, 0x4) 08:40:22 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, 0xffff}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1ffffe, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:40:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x3c}, {0x20000000000006}]}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0xfffffffffffffc88) sendmmsg(r0, &(0x7f0000003040), 0x3fffffffffffe72, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x81, 0x0, 0x7f, 0x0, 0xfffffffffffffe01, 0x0, 0x5, 0x12, 0xffffffffffffff9a, 0x57a8, 0x98, 0x0, 0x0, 0x0, 0xd2e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x3e, 0xcb3e, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x85e3, 0x6, 0x2, 0x5, 0x7, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x7a81, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x5, r2, 0x1) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x72) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000002000000000000000000000000002000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000680)) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e22, 0x0, @loopback, 0x1000}}, 0x0, 0x80, 0x0, "e3e55f454daf778092c654bcfdee333d82f8553bd95857fc3381f892fa4355e88c6df6c17045ddf398421a8b158a71e6fb1a1ba854c356e8d5b0dfed4347427d383d7d975eded47f6ac21d4f6fd10386"}, 0xd8) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000280)=""/246, 0xf6) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000002500)) 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 589.964652] binder: 18002:18007 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000200)={0xe524, {{0x2, 0x4e20, @loopback}}}, 0x88) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xa, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000000c0)=@v3, 0x18, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xee00]) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="870000007d850000006f000300010400000c00000000000000eeffffff00000000000700000000000000000000000000000002002e5e16006370757365742e6566666563746976655f637075730016006370757365742e6566666563746976655f63707573000e00747275737465917d6d312726237d03006c6f5d", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5], 0x87) syz_extract_tcp_res(&(0x7f0000000040), 0x6, 0x1) 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 590.043750] binder: 18026:18028 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 590.113223] binder: 18031:18040 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 08:40:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c40000018f8"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:22 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000907800004018a6"], 0x0) 08:40:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000340)) futex(&(0x7f000000cffc), 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f0000000300)={0x77359400}, 0x8) r2 = open(0x0, 0x4, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000200)) exit(0x10008) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="743612", @ANYRES64=r1, @ANYRES16=r0, @ANYRESDEC=r3], 0x21) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x10000, 0x4, 0xbf, 0xb796, 0x6, 0x0, 0x5, 0x0, 0x100000000, 0x3fe, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x0, 0x4, 0x2, 0x3, 0x5, 0x0, 0x7, 0x9, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x5, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0x6, 0x10000, 0x3}, r5, 0x0, r4, 0x9) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x7) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x82) prlimit64(r8, 0x6, 0x0, &(0x7f0000000080)) r10 = creat(&(0x7f0000000380)='./file0\x00', 0x120) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES64=r2, @ANYRES16=r1, @ANYPTR64], @ANYRES16=r5, @ANYRESHEX=r4, @ANYRESOCT=r9, @ANYPTR, @ANYRES32=r7, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRESDEC=r9, @ANYRES16=r9, @ANYPTR64], @ANYRESHEX=r10, @ANYRESOCT=r1, @ANYRESHEX=r3], @ANYRESOCT=r9, @ANYRESOCT], 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0x110) fallocate(r1, 0x0, 0x7fff, 0x0) getresuid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f0000000700)) keyctl$get_persistent(0x16, r11, 0x0) write$cgroup_type(r10, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r10, 0x3, 0x5e89, 0xfff9) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 08:40:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x20000000000) r1 = epoll_create1(0x80000) r2 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_\x00\x04\x00\x00\x04\x00\x00\x00var_run_t:s0\x00\xc80x0}, &(0x7f0000000500)=0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x2, 0xfffffffffffffffe, 0x5, 0x6, 0x0, 0x1f, 0x20000, 0x0, 0x1ff, 0xff, 0x0, 0x2, 0x1, 0x7fffffff, 0x6, 0x7, 0x8, 0xfff, 0x0, 0x5, 0x1, 0x3f, 0x6, 0xf02, 0x9206, 0x6, 0x7, 0x23, 0x8, 0x8, 0x0, 0xe4df, 0x7f, 0x6665d02d, 0x1, 0x3ff, 0x0, 0x2, 0x3, @perf_config_ext={0x6, 0x8}, 0x8000, 0x5, 0xffffffffffffff00, 0x4, 0xd4, 0x8, 0xfffffffffffffffc}, r4, 0x9, r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8, 0x0, 0x1000, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) connect(r5, &(0x7f0000000340)=@x25={0x9, @remote={[], 0x0}}, 0x80) rename(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0243d5db96127a2d87da90c423ca8d4d8d0d82b9b26abe41d4"], 0x19}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000240)) dup2(r1, r5) socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r2, 0x0, 0x0) r6 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r7 = dup3(r0, r6, 0x80000) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f00000000c0)=0xfffe) 08:40:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 590.180992] binder: undelivered death notification, 0000000000000000 [ 590.189230] binder: undelivered death notification, 0000000000000000 08:40:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @multicast2}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x1, 0x3, 0x4, 0x100, 0x0, 0x80200, r3}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'lo\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x1000, 0x5, 0x9, 0x5041493f, 0x373, 0x8, 0x200, 0x2, 0x81, [0x9f, 0x1ff, 0x4, 0x1, 0x26e, 0x3ff, 0x7ff, 0x401], [0x7fffffff]}}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="a8eb8f968b61e4e097733227558e593e", @local, 0x10000, 0x6, 0x4, 0x400, 0x20000000000, 0x0, r3}) r4 = socket$inet(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, &(0x7f0000001180)=""/166, &(0x7f0000000040)=0xa6) r5 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$int_in(r4, 0x5452, &(0x7f0000000400)=0x334f814f) request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', r5) 08:40:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 590.471176] binder: 18078:18079 BC_CLEAR_DEATH_NOTIFICATION invalid ref -132644864 [ 590.480362] binder: 18078:18080 BC_CLEAR_DEATH_NOTIFICATION invalid ref -132644864 08:40:23 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8400, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x50080, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x40000010}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="61010000", @ANYRES16=r2, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="d099e5f4b74c6d", 0x7}], 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000100)) 08:40:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x0, @mcast2}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000000000000000086dd60093a0600083a00fe80000000000000ff53020000000000dfff0009000000000008907800000000000000000000000000ba613d83b947165041bb20fe25f17aa220a54ad1b5115cf61047b281e42435782c299fa5044fd2d4f06dd5626f3e5a7343615c57eb402038937d2ff046600a529d9a2a0aa1a877312bc762513a049aa4368255718710392e4e041d715cb4e706357628275b63f59c3ddfeb73c9f3d7ddc6b9a04cfaad1039f864732359f10362004620e4f98514fcf0d4b1800b751cc9fc32f048c6800dfb2976594cad38efd53800000000000000"], 0x0) listxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/134, 0x86) 08:40:23 executing program 2: socketpair$unix(0x1, 0x800005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x890b, &(0x7f0000000140)={'ifb0\x02\x00\x00\x00\x02\x00', @ifru_map}) r3 = accept(r0, 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 08:40:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000e630140000000004b708d60ac29e27c406f25516a2c2645dd389cd24bfb62641468b349aec34ee1097e6f778a7f1f5efb019775ade6db744bec6863506fb626d6c54510eff6e9fb3f71c3ebdb3543e298ded9a97b8ed7ee5bdd4f364a60530e1b9b1e494e9f902f719961201ea4e8e62ee8fee193e2e3e6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 590.800455] binder: 18084:18087 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 590.877960] binder: 18102:18105 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 590.884317] binder: 18106:18107 unknown command 1073832718 [ 590.891961] binder: 18106:18107 ioctl c0306201 20000000 returned -22 [ 590.901512] binder: 18106:18107 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 590.917592] binder: 18106:18107 unknown command 1073832718 [ 590.923597] binder: 18106:18109 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 590.932314] binder: 18106:18107 ioctl c0306201 20000000 returned -22 08:40:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x0, &(0x7f0000000740)=ANY=[], 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x1, @mcast2, 0xffffffffffffffbb}, {0xa, 0x0, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xc}, 0x1000}, 0x7, [0xfffffffffffffff9, 0x824d, 0x1, 0xc7, 0x8, 0x2]}, 0x5c) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000300)={'team0\x00', 0x43}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000480)=0x1, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) clone(0x20000000, &(0x7f0000000000), 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x806, 0x0) ioctl(r3, 0xc1, &(0x7f00000004c0)="da7d4b86c2818b75c47f9771d213aedc1cf42145619d6d4f3d64117bf61b5127ad7af6959693156c7711fe75eabf00799280241f1e5aad27d1f3ba517f4aadabeadf5f1953569ed70cee0b91162c85a0e14e7b79821c0ba0b136b09e") io_setup(0x4, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c004) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x200) ioctl(r0, 0x1000008912, &(0x7f0000000040)) ioctl$KDGETLED(r2, 0x4b31, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000980)={0xa, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffcb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') 08:40:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40001, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x8, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7fff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) 08:40:23 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4d, 0xfffffffffffffffd) 08:40:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000340)) futex(&(0x7f000000cffc), 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f0000000300)={0x77359400}, 0x8) r2 = open(0x0, 0x4, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000200)) exit(0x10008) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="743612", @ANYRES64=r1, @ANYRES16=r0, @ANYRESDEC=r3], 0x21) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x10000, 0x4, 0xbf, 0xb796, 0x6, 0x0, 0x5, 0x0, 0x100000000, 0x3fe, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x0, 0x4, 0x2, 0x3, 0x5, 0x0, 0x7, 0x9, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x5, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0x6, 0x10000, 0x3}, r5, 0x0, r4, 0x9) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x7) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x82) prlimit64(r8, 0x6, 0x0, &(0x7f0000000080)) r10 = creat(&(0x7f0000000380)='./file0\x00', 0x120) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES64=r2, @ANYRES16=r1, @ANYPTR64], @ANYRES16=r5, @ANYRESHEX=r4, @ANYRESOCT=r9, @ANYPTR, @ANYRES32=r7, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRESDEC=r9, @ANYRES16=r9, @ANYPTR64], @ANYRESHEX=r10, @ANYRESOCT=r1, @ANYRESHEX=r3], @ANYRESOCT=r9, @ANYRESOCT], 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0x110) fallocate(r1, 0x0, 0x7fff, 0x0) getresuid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f0000000700)) keyctl$get_persistent(0x16, r11, 0x0) write$cgroup_type(r10, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r10, 0x3, 0x5e89, 0xfff9) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 08:40:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='!c\f\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xffffffffffffdf1d) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x6) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x100000000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 08:40:23 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @speck128, 0x1, "ff3a4cb55c53917c"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/213) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00'}, &(0x7f0000000600)=0x16) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xffffffffffffff3d) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={@ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x9, 0x4, 0x5, 0x500, 0x3, 0x80000000, r2}) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x450) 08:40:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 591.158690] binder: 18118:18120 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4003ff) fallocate(r1, 0x3, 0x8000, 0x8001) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000000)=""/51) fallocate(r0, 0x3, 0x7, 0x8) 08:40:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x2) write(r0, &(0x7f00000000c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) 08:40:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 591.231640] binder: 18130:18135 ioctl c0306201 0 returned -14 [ 591.245936] binder: 18130:18135 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:24 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x29) close(r0) write$apparmor_exec(r1, &(0x7f0000000140)={'exec ', 'selinuxvboxnet0&security\x00'}, 0x1e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x4) preadv(r0, &(0x7f0000001800)=[{&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/246, 0xf6}, {&(0x7f0000001540)=""/251, 0xfb}, {&(0x7f0000001640)=""/48, 0x30}, {&(0x7f0000001680)=""/175, 0xaf}, {&(0x7f0000001740)=""/165, 0xa5}], 0x9, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e25, @multicast2}, 0xffffffffffffffee) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) shutdown(r2, 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 591.353632] binder: 18146:18153 ioctl c0306201 0 returned -14 [ 591.360191] binder: 18146:18153 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 591.496136] binder: 18149:18161 unknown command 0 [ 591.501168] binder: 18149:18161 ioctl c0306201 200001c0 returned -22 [ 591.508586] binder: 18149:18161 unknown command 811809 [ 591.514432] binder: 18149:18161 ioctl c0306201 20008fd0 returned -22 [ 591.521850] binder: 18149:18161 ioctl 40046205 ffffffffffffdf1d returned -22 [ 591.531234] binder: 18149:18162 unknown command 0 [ 591.536208] binder: 18149:18162 ioctl c0306201 200001c0 returned -22 [ 591.555208] binder: 18149:18162 unknown command 811809 [ 591.560720] binder: 18149:18162 ioctl c0306201 20008fd0 returned -22 [ 591.571653] binder: 18149:18161 ioctl 40046205 ffffffffffffdf1d returned -22 08:40:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x10000000000000e0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2000}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00041bbd7000812501f7ffff72797ae70000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x2, 0x7ff, 0x800, 0xdc45}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 08:40:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:24 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x801, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)) fchmod(r2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000700)=0xe8) accept$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000880)={0x0, @dev, @loopback}, &(0x7f00000008c0)=0xc) getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'nr0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @multicast2, @empty}, &(0x7f0000000c00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000d40)=0xe8) getpeername$packet(r0, &(0x7f0000002980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000029c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005000)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005040)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000005140)=0xe8) accept4(r0, &(0x7f0000005180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000005200)=0x80, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005240)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@local}}, &(0x7f0000005340)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000005380)={@loopback, 0x0}, &(0x7f00000053c0)=0x14) getpeername$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005440)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005480)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@remote}}, &(0x7f0000005580)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000055c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000056c0)=0xe8) getpeername$packet(r0, &(0x7f0000005700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005740)=0x14) getpeername$packet(r0, &(0x7f0000005780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000057c0)=0x14) accept$packet(r0, &(0x7f0000005800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005840)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005880)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4}}, &(0x7f0000005980)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000062c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006280)={&(0x7f00000059c0)={0x8ac, r3, 0x320, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x15c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0xee, 0x2, 0xffffffffffffffe1}, {0x8, 0x9, 0x1, 0x1}, {0x200, 0xee, 0x6e7, 0x4}, {0x3, 0x0, 0xa04, 0x3}, {0x4, 0xffff, 0xbd03, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x800, 0x4, 0x3ff, 0x3118}, {0x101, 0xfffffffffffffffa, 0x3, 0x1}]}}}]}}, {{0x8, 0x1, r7}, {0x160, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r12}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x376}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r14}, {0x194, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0xffffffff, 0x20cd, 0x8, 0x401}, {0x3, 0x3f, 0x0, 0x3}, {0xffffffff, 0x8, 0x1, 0x1}, {0xf3, 0x16b1, 0xd272, 0x100000000}, {0x8, 0x6, 0x80000000, 0x7f}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x30}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x134, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff8001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x4533, 0x3, 0x624f, 0x101}, {0xfffffffffffffffe, 0x9, 0x7fffffff}, {0x0, 0xd1b, 0x1560, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r21}, {0x134, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xb55c}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r25}}}]}}, {{0x8, 0x1, r26}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 08:40:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000440)='trusted\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000400)=[{&(0x7f0000000340)="f2f7d32dfc136be49f2fa0b0e8f4726f268ee65ed114dc90b06fca9ee848ebdf48b251af2e2ca3f9ee8b125e657beff7cd8ae88b440c85db236da904004ab26682a965cca32e49315bc41d2330cc0351ad9624ca5916181f88c02b26dab2e79e472a80241dd6f82d256d28ba83d591b599eff88b7256f3011880bda05f685c11fe8bbcf5d7182e91cc27c42fbceed405e66942f7fb2b75ec3d60a4f6bdef48a35e34dda31f435e1c05c588ed1032163e2d42ae48bf7a8ceb665a2c", 0xbb}], 0x1, r2) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x40080, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f00000001c0)=0x1000) shutdown(r0, 0xffffffffffffffff) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000900)=@req3={0x8, 0x6, 0xba, 0xc8b7, 0x8, 0x7fffffff}, 0x336) r6 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r6) write$P9_RREADDIR(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="490000002901000600000070ff0000000700000000000000040002ffff000000ff07002e2f66696c653002020000ed0400000000000000ff7f0000fdffffff0807002e2f66696c6530"], 0x49) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v2={0x2000000, [{0x3}, {0xfffffffffffffff8, 0x80000000}]}, 0x14, 0x1) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000940)=""/21) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000b0070000f00200000000000088010000f002000060050000e0060000e0060000e0060000e0060000e006000005000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x810) [ 591.669310] binder: 18166:18168 ioctl c0306201 0 returned -14 [ 591.683311] binder: 18166:18168 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:24 executing program 4: socket$inet6(0xa, 0x2, 0x100000) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/154) 08:40:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000340)) futex(&(0x7f000000cffc), 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f0000000300)={0x77359400}, 0x8) r2 = open(0x0, 0x4, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000200)) exit(0x10008) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="743612", @ANYRES64=r1, @ANYRES16=r0, @ANYRESDEC=r3], 0x21) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x10000, 0x4, 0xbf, 0xb796, 0x6, 0x0, 0x5, 0x0, 0x100000000, 0x3fe, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x0, 0x4, 0x2, 0x3, 0x5, 0x0, 0x7, 0x9, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x5, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0x6, 0x10000, 0x3}, r5, 0x0, r4, 0x9) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x7) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x82) prlimit64(r8, 0x6, 0x0, &(0x7f0000000080)) r10 = creat(&(0x7f0000000380)='./file0\x00', 0x120) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES64=r2, @ANYRES16=r1, @ANYPTR64], @ANYRES16=r5, @ANYRESHEX=r4, @ANYRESOCT=r9, @ANYPTR, @ANYRES32=r7, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRESDEC=r9, @ANYRES16=r9, @ANYPTR64], @ANYRESHEX=r10, @ANYRESOCT=r1, @ANYRESHEX=r3], @ANYRESOCT=r9, @ANYRESOCT], 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0x110) fallocate(r1, 0x0, 0x7fff, 0x0) getresuid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f0000000700)) keyctl$get_persistent(0x16, r11, 0x0) write$cgroup_type(r10, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r10, 0x3, 0x5e89, 0xfff9) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 08:40:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:24 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x7}, 0xf) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20100, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x3e, &(0x7f0000000040), &(0x7f0000000080)=0x4) pipe(&(0x7f0000000180)) 08:40:24 executing program 2: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002000006008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') ioctl$TCXONC(r0, 0x540a, 0x936) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(r1, 0x1263, &(0x7f0000000180)) 08:40:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xcd9) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000080)=""/224, &(0x7f0000000180)=0xe0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xfffffcd3, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x5e1, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304400000004000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 592.072313] binder: 18192:18194 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000000440), 0x20) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000340)=""/218, &(0x7f00000000c0)=0xda) getgroups(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0) 08:40:24 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x3f, @dev={0xfe, 0x80, [], 0x15}, 0x2}}, 0x0, 0x100000001, 0x0, "bfb78c3b107697831cb614a82558cd06e98fd13c18f740ed7883db767db6901a79e6f92a48adef192062df4cd110ca1691e7449ea0a168bf49bc1ab642c1507ca7577716c9b682b2179961dc210bbc25"}, 0xd8) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0202200313000000000000000000000005000600571866720a0000000700000000000000200000005500000000000000000000000000000005000900df0000002a00002000000000fe8000000000000007000000000000ff00000000000000000200010000ffff000000050d0000000005000500eb0000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) capget(&(0x7f0000000240)={0x0, r3}, &(0x7f0000000280)={0x3, 0x0, 0x401, 0x4, 0x28b5}) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x7, 0x4) 08:40:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x10) fallocate(r2, 0x4, 0x800000000000000, 0x5) fallocate(r2, 0x3, 0x8, 0x8006) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) 08:40:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000025385c00000000170000000000000000000000000000"], 0x83}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x1, 0x0, 0x2}, 0x10}}, 0x0) [ 592.149546] binder: 18204:18205 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 592.215823] binder: 18219:18223 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 592.241888] binder: 18216:18233 unknown command 0 [ 592.252521] [ 592.254201] ===================================== [ 592.258303] binder: 18216:18233 ioctl c0306201 200001c0 returned -22 [ 592.259028] WARNING: bad unlock balance detected! [ 592.266536] binder: 18216:18233 Acquire 1 refcount change on invalid ref 1073741824 ret -22 [ 592.270357] 4.14.103+ #18 Not tainted [ 592.270359] ------------------------------------- [ 592.270363] migration/0/11 is trying to release lock (&rq->lock) at: [ 592.270378] [] migration_cpu_stop+0x2dd/0x430 [ 592.270380] but there are no more locks to release! [ 592.270386] [ 592.270386] other info that might help us debug this: [ 592.278866] binder: 18216:18233 unknown command 0 [ 592.282640] 1 lock held by migration/0/11: [ 592.282641] #0: (&p->pi_lock){-.-.}, at: [] migration_cpu_stop+0xe1/0x430 [ 592.282656] [ 592.282656] stack backtrace: [ 592.282662] CPU: 0 PID: 11 Comm: migration/0 Not tainted 4.14.103+ #18 [ 592.282668] Call Trace: [ 592.287506] binder: 18216:18233 ioctl c0306201 20000000 returned -22 [ 592.293973] dump_stack+0xb9/0x10e [ 592.293981] ? migration_cpu_stop+0x2dd/0x430 [ 592.293990] print_unlock_imbalance_bug.cold+0x110/0x11f [ 592.293999] ? lock_set_class+0x3b6/0x570 [ 592.302009] binder: 18216:18233 unknown command 0 [ 592.305071] ? migration_cpu_stop+0x2dd/0x430 [ 592.305077] ? reacquire_held_locks+0x3f0/0x3f0 [ 592.305092] ? set_task_cpu+0x30b/0x9f0 [ 592.311869] binder: 18216:18238 Acquire 1 refcount change on invalid ref 1073741824 ret -22 [ 592.316599] ? move_queued_task+0x382/0x970 [ 592.316610] ? migration_cpu_stop+0x2dd/0x430 [ 592.316637] ? cpu_stopper_thread+0x130/0x320 [ 592.320943] binder: 18216:18238 unknown command 0 [ 592.329495] ? sched_ttwu_pending+0x2a0/0x2a0 [ 592.329501] ? cpu_stopper_thread+0x215/0x320 [ 592.329515] ? _raw_spin_unlock_irq+0x24/0x50 [ 592.334040] binder: 18216:18233 ioctl c0306201 200001c0 returned -22 [ 592.340638] ? sched_ttwu_pending+0x2a0/0x2a0 [ 592.340645] ? cpu_stopper_thread+0x19b/0x320 [ 592.340652] ? cpu_stop_create+0x80/0x80 [ 592.340658] ? smpboot_thread_fn+0x5ca/0x900 [ 592.340667] ? sort_range+0x30/0x30 [ 592.343275] binder: 18216:18238 ioctl c0306201 20000000 returned -22 [ 592.349709] ? sort_range+0x30/0x30 [ 592.349716] ? kthread+0x310/0x420 [ 592.349722] ? kthread_create_on_node+0xf0/0xf0 [ 592.349731] ? ret_from_fork+0x3a/0x50 08:40:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000340)) futex(&(0x7f000000cffc), 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f0000000300)={0x77359400}, 0x8) r2 = open(0x0, 0x4, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000200)) exit(0x10008) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="743612", @ANYRES64=r1, @ANYRES16=r0, @ANYRESDEC=r3], 0x21) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x10000, 0x4, 0xbf, 0xb796, 0x6, 0x0, 0x5, 0x0, 0x100000000, 0x3fe, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x0, 0x4, 0x2, 0x3, 0x5, 0x0, 0x7, 0x9, 0x8, 0xd4f0, 0x1, 0xda3, 0x80000000, 0x5, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0x6, 0x10000, 0x3}, r5, 0x0, r4, 0x9) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x7) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x82) prlimit64(r8, 0x6, 0x0, &(0x7f0000000080)) r10 = creat(&(0x7f0000000380)='./file0\x00', 0x120) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES64=r2, @ANYRES16=r1, @ANYPTR64], @ANYRES16=r5, @ANYRESHEX=r4, @ANYRESOCT=r9, @ANYPTR, @ANYRES32=r7, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRESDEC=r9, @ANYRES16=r9, @ANYPTR64], @ANYRESHEX=r10, @ANYRESOCT=r1, @ANYRESHEX=r3], @ANYRESOCT=r9, @ANYRESOCT], 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0x110) fallocate(r1, 0x0, 0x7fff, 0x0) getresuid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f0000000700)) keyctl$get_persistent(0x16, r11, 0x0) write$cgroup_type(r10, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r10, 0x3, 0x5e89, 0xfff9) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 08:40:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000b00), 0x4000000000000f6, 0x20004000) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @multicast1}, {0x0, @local}, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 'rose0\x00'}) 08:40:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="973ad2c862fa8be6"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:25 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) syz_emit_ethernet(0x160, &(0x7f0000000000)={@local, @random="b491d26f2437", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x132, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70, 0x30}, @dev}}}}}}, 0x0) r1 = gettid() ptrace$peek(0xffffffffffffffff, r1, &(0x7f0000000040)) 08:40:25 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) tkill(r0, 0x16) remap_file_pages(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x4, 0xc7, 0x1000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) 08:40:25 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="03000020f4ace3ff0000af1900080031834bf67ab8995f19ec896be4de083271609e761e8ccd18812356e5390d020000000000000000"], 0x1}}, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RSTAT(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x117) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000280)={0x6, @multicast1, 0x4e20, 0x1, 'fo\x00', 0x1d, 0x100, 0x2e}, 0x2c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ioctl$IOC_PR_RELEASE(r7, 0x401070ca, &(0x7f00000002c0)={0x100000000, 0x5, 0x1}) ftruncate(r7, 0xbb1) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x5, 0xfffffffffffffffe, 0x0, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000a540)={'team0\x00'}) ioctl$TIOCSCTTY(r6, 0x540e, 0x3) getsockname$unix(r7, &(0x7f0000000480)=@abs, &(0x7f0000000200)=0x6e) sendfile(0xffffffffffffffff, r3, &(0x7f0000d83ff8), 0x800000000024) socket$inet_udplite(0x2, 0x2, 0x88) 08:40:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 593.149698] binder: 18244:18250 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 593.183751] binder: 18257:18263 unknown command -925746537 [ 593.186776] binder: 18258:18262 BC_CLEAR_DEATH_NOTIFICATION death notification not active 08:40:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 593.189680] binder: 18257:18263 ioctl c0306201 20008fd0 returned -22 [ 593.207590] binder: 18257:18266 unknown command -925746537 [ 593.223634] binder: 18269:18270 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 593.239565] binder: 18257:18266 ioctl c0306201 20008fd0 returned -22 08:40:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440000000000e63c709a79f03ef"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 593.273914] binder: 18275:18282 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 593.282449] binder: 18275:18282 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 593.305410] binder: 18285:18286 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 593.313626] binder: 18285:18286 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 593.316971] binder: 18287:18290 unknown command 164061966 [ 593.342095] binder: 18287:18290 ioctl c0306201 20000000 returned -22 [ 593.366501] binder: 18287:18290 unknown command 164061966 [ 593.373390] binder: 18287:18290 ioctl c0306201 20000000 returned -22 08:40:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8644949cb395fd21ca8d400000013000100000000000000000000000000000000000000000000000000ac1414aa0026ed000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00'], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41000218}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@getsadinfo={0x48, 0x23, 0xa00, 0x70bd2d, 0x25dfdbff, 0x0, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local}}, @output_mark={0x8, 0x1d, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 08:40:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:26 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) tkill(r0, 0x16) remap_file_pages(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x4, 0xc7, 0x1000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) 08:40:26 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000240)={0xfffffffffffffc88}, 0xfdb1) creat(&(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000040)={0xffffffffffff1d07}) 08:40:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x110, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x10005}, 0x2c) close(r3) ptrace$setopts(0x4206, r2, 0x0, 0x0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x19) ptrace$cont(0x18, r4, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0xc) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000040)={0x2, 0x3ff}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x6, 0x65}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r4, 0x0, 0x0) 08:40:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 594.030647] binder: 18298:18300 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 594.045192] binder: 18298:18300 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 594.070196] selinux_nlmsg_perm: 4408 callbacks suppressed 08:40:26 executing program 5: epoll_create(0x40000000007) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}}, 0x4) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x5de96ab57847342c, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100013, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) openat$cgroup_subtree(r2, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) uname(&(0x7f00000003c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) ptrace$setregset(0x4205, r6, 0x202, &(0x7f00000004c0)={&(0x7f0000000440)="398b3fdd0478f8c841ac1b7c64f400328f365645b05ebdc32312f791a910b3305eea6f1475114d060208839dffb4c471ea3f5d233a868427ca6a69ac12e9b1bd27f4f37a993ef6f4f824c41e03b3dd747d8896921dcadf2e463b52e4926870a0e7310a96b47ae12ec4f1bf423f63e6c17a3235e8ae8b5ae1", 0x78}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xb78) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x18) 08:40:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) 08:40:26 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) 08:40:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 594.070205] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14795 sclass=netlink_xfrm_socket pig=18312 comm=syz-executor.1 [ 594.095794] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14795 sclass=netlink_xfrm_socket pig=18312 comm=syz-executor.1 08:40:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 08:40:26 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) tkill(r0, 0x16) remap_file_pages(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x4, 0xc7, 0x1000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) 08:40:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 594.189995] binder: 18336:18337 ioctl c0306201 0 returned -14 08:40:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 08:40:27 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) 08:40:27 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r1 = getegid() getresgid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) getgroups(0x4, &(0x7f0000000340)=[0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) fstat(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x400, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r5) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x3}, [{0x2, 0x1, r0}], {0x4, 0x1}, [{0x8, 0x0, r1}, {0x8, 0x1, r2}, {0x8, 0x7, r3}, {0x8, 0x6, r4}, {0x8, 0x4, r5}, {0x8, 0x4, r7}], {}, {0x20, 0x1}}, 0x5c, 0x1) r8 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) eventfd(0x7ff) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ef620c400002fd9c64bc"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x5) [ 594.216003] audit: type=1400 audit(1550997626.946:181): avc: denied { map } for pid=18333 comm="syz-executor.0" path="/dev/zero" dev="devtmpfs" ino=1030 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:zero_device_t:s0 tclass=chr_file permissive=1 [ 594.253207] binder: undelivered death notification, 0000000000000000 [ 594.260664] binder: 18345:18346 ioctl c0306201 0 returned -14 [ 594.261832] binder: undelivered death notification, 0000000000000000 [ 594.325761] binder: 18350:18353 ioctl c0306201 0 returned -14 [ 594.366522] binder: 18359:18360 unknown command 1074553583 [ 594.377029] binder: 18359:18360 ioctl c0306201 20008fd0 returned -22 [ 594.386107] binder: 18359:18360 unknown command 1074553583 [ 594.392325] binder: 18359:18360 ioctl c0306201 20008fd0 returned -22 08:40:29 executing program 4: openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 08:40:29 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) tkill(r0, 0x16) remap_file_pages(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x4, 0xc7, 0x1000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) 08:40:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:40:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) 08:40:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @dev}, &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0xb}, @in=@rand_addr=0x7, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0x3f, r2, r3}, {0x7, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x100, 0x5}, {0x1, 0x7, 0x0, 0x31f}, 0x8, 0x6e6bb5, 0x1, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x4d4}, 0x0, @in6=@rand_addr="b92138f1d24bf42a9fdec23694358adb", 0x3507, 0x4, 0x0, 0xfffffffffffffff8, 0x9, 0x81, 0x8001}}, 0xe8) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563044000819b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:29 executing program 5: epoll_create(0x40000000007) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}}, 0x4) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x5de96ab57847342c, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100013, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) openat$cgroup_subtree(r2, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) uname(&(0x7f00000003c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) ptrace$setregset(0x4205, r6, 0x202, &(0x7f00000004c0)={&(0x7f0000000440)="398b3fdd0478f8c841ac1b7c64f400328f365645b05ebdc32312f791a910b3305eea6f1475114d060208839dffb4c471ea3f5d233a868427ca6a69ac12e9b1bd27f4f37a993ef6f4f824c41e03b3dd747d8896921dcadf2e463b52e4926870a0e7310a96b47ae12ec4f1bf423f63e6c17a3235e8ae8b5ae1", 0x78}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xb78) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x18) 08:40:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:40:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:40:29 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x521800, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002f80), 0x0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x4d, 0x4, 0x6, "4f60ea4ae82ca63098c4c6809ba01f79", "2df42f374d647a2b84970663b1f64fdad26fb792733bd25d8a6a765e3725d4b543348aa001a9acae945569c3d841a28e318d90c7340fccf3"}, 0x4d, 0x2) timerfd_gettime(r1, &(0x7f0000000040)) 08:40:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) 08:40:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) 08:40:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) [ 597.097989] binder: 18381:18389 ioctl 4c81 0 returned -22 [ 597.108196] binder: 18381:18389 Acquire 1 refcount change on invalid ref 10191104 ret -22 [ 597.131854] binder: 18381:18389 unknown command 0 08:40:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x400000000008000, 0xff0d) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26, 0x1) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000180), 0xdb}}, {{0x0, 0x360, &(0x7f0000000040), 0x637, &(0x7f0000000140)}}], 0x40007aa, 0x48000) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 08:40:29 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) tkill(r0, 0x16) remap_file_pages(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x4, 0xc7, 0x1000) 08:40:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c6e6f646f74732c6572726f72733d636f6e74699dc951fbf76e75652c73686f7765786563"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101181, 0x0) getdents(r1, &(0x7f0000000040)=""/95, 0x5f) 08:40:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) [ 597.146654] binder: 18381:18389 ioctl c0306201 20000000 returned -22 [ 597.162011] binder: 18381:18403 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 08:40:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\f#'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 597.218951] binder: 18381:18389 ioctl 4c81 0 returned -22 [ 597.225309] binder: 18381:18403 Acquire 1 refcount change on invalid ref 10191104 ret -22 [ 597.239646] binder: 18381:18414 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 597.255363] binder: 18381:18403 unknown command 0 [ 597.260562] binder: 18381:18403 ioctl c0306201 20000000 returned -22 [ 597.307012] binder: 18424:18425 unknown command 8972 [ 597.312814] binder: 18424:18425 ioctl c0306201 200001c0 returned -22 [ 597.323076] binder: 18424:18427 unknown command 8972 [ 597.328304] binder: 18424:18427 ioctl c0306201 200001c0 returned -22 [ 597.337353] binder: undelivered death notification, 0000000000000000 [ 597.345203] binder: undelivered death notification, 0000000000000000 08:40:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getpgid(0x0) sched_setaffinity(0x0, 0xf3cd35bf5eed4d06, &(0x7f0000000400)=0x5) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2\xaaP[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdh\xc5\xbd\f\x9d\xce\tby(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f\x00\x00\x00', 0x0) accept4$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x800) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), 0x0, 0x1000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffffb3a0000000000000005000000e000000200008001e000000200000014e4a43514"], 0x24) write$P9_RWALK(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="f0128e53b8ff66a0ef77dd0b5222dc3881fcac74a4e303ccd22244a4b1f4387a4814a3c9fd919b68e5bf03bb"], 0x2c) write$cgroup_int(r4, &(0x7f0000000080), 0x2001007f) ioctl$VT_WAITACTIVE(r4, 0x5607) syz_genetlink_get_family_id$tipc2(0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x2, 0x4, 0xde, 0x7, r5}) ioctl$TCSETA(r3, 0x5406, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x1, 0xb, 0xbad, 0xfff8000000000000, 0x4, 0x2, 0x5a}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000980)) fsync(r4) 08:40:30 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x210, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x40000, 0xfff) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1f, 0x8}) 08:40:30 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:40:30 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) tkill(r0, 0x16) 08:40:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 08:40:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 08:40:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000001c0)={0x80ffffff}) 08:40:30 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000049000002"], 0x10}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0xb, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 08:40:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 597.529070] binder: undelivered death notification, 0000000000000000 08:40:30 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000080), 0x0}, 0x18) 08:40:30 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:40:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x74, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f"], 0x0, 0x0, 0x0}) [ 597.585999] binder: undelivered death notification, 0000000000000000 08:40:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:40:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80050000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x130, r2, 0x708, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x46}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc366}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x800, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffffffffff000, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2040000000000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') sendto$inet(r3, &(0x7f0000000300)="25932519bb831f03e1ec4677d4ff79249273e2415b1c49d3fde97f474963c8e5a9224c01509f982d68de3eddf6b920260a9a968a63ac641582d282734a5f755f8b6d2614bca881c0dbb341fb41286592ebd0766a13a92a9016b6b5e0b26000bd0a9c3a2d32552e1adb118db5e3812f660a9ed234d590d40042de60b4e35b58cd5be910eea19e6c05488894b6", 0x8c, 0x4, &(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0xffffffffffff0001}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 08:40:30 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) 08:40:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x74, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f"], 0x0, 0x0, 0x0}) 08:40:30 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:40:30 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000080), 0x0}, 0x18) [ 597.636169] binder: 18472:18475 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 597.648980] binder: 18472:18475 unknown command -1205852776 [ 597.657256] binder: 18472:18475 ioctl c0306201 20008fd0 returned -22 08:40:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x74, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f"], 0x0, 0x0, 0x0}) [ 597.716508] binder: 18485:18490 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 597.728522] binder: 18485:18490 unknown command -1205852776 [ 597.729460] binder: undelivered death notification, 0000000000000000 [ 597.734488] binder: 18485:18490 ioctl c0306201 20008fd0 returned -22 [ 597.749220] binder: undelivered death notification, 0000000000000000 08:40:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x74, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f"], 0x0, 0x0, 0x0}) 08:40:30 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000080), 0x0}, 0x18) 08:40:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x74, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f"], 0x0, 0x0, 0x0}) 08:40:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xae, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f8"], 0x0, 0x0, 0x0}) [ 597.768307] binder: 18498:18500 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 597.782530] binder: 18498:18500 unknown command -1205852776 [ 597.788257] binder: 18498:18500 ioctl c0306201 20008fd0 returned -22 08:40:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x74, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f"], 0x0, 0x0, 0x0}) 08:40:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x14200, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000180)) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) close(r1) 08:40:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0xfffffffffffffdf9, 0x0, 0x0}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$eventfd(r1, &(0x7f0000000100), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000000000e630c003bf0adb4dd14aed853b81f455ce1f077cd1e8bceb7c53afb5ede51c76dd9d9cebc25c74e3c5fc87426be95fb44fff46f98f2cc6ee27e7e4b50dd1ae1e76d79ab61e085fe5a234ed9d6536f6a27a02d9c9a59dd10e9e95cd84464c9fc68dcad09a8a85ae278f4f9ac12afa3201135c6f100001b0ed3b9e4e838c8a45e8c0500000000000000000000000000000000000000000000000000000000894a0e4e925598556b83b8f8f47bae00ebaa58611f0b78990d000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 597.815470] binder: 18509:18510 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 597.827697] binder: 18509:18510 unknown command -1205852776 [ 597.833747] binder: 18509:18510 ioctl c0306201 20008fd0 returned -22 [ 597.880994] binder: 18520:18521 ioctl c0306201 20000040 returned -14 [ 597.887909] binder: 18520:18521 unknown command 811790 [ 597.893689] binder: 18520:18521 ioctl c0306201 20000000 returned -22 [ 597.901227] binder: 18520:18521 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 597.910362] binder: 18520:18522 ioctl c0306201 20000040 returned -14 [ 597.917067] binder: 18520:18522 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 597.924093] binder: 18520:18521 unknown command 811790 [ 597.929414] binder: 18520:18521 ioctl c0306201 20000000 returned -22 08:40:31 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) 08:40:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xae, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f8"], 0x0, 0x0, 0x0}) 08:40:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) 08:40:31 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000080), 0x0}, 0x18) 08:40:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80050000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x130, r2, 0x708, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x46}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc366}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x800, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffffffffff000, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2040000000000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') sendto$inet(r3, &(0x7f0000000300)="25932519bb831f03e1ec4677d4ff79249273e2415b1c49d3fde97f474963c8e5a9224c01509f982d68de3eddf6b920260a9a968a63ac641582d282734a5f755f8b6d2614bca881c0dbb341fb41286592ebd0766a13a92a9016b6b5e0b26000bd0a9c3a2d32552e1adb118db5e3812f660a9ed234d590d40042de60b4e35b58cd5be910eea19e6c05488894b6", 0x8c, 0x4, &(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0xffffffffffff0001}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 08:40:31 executing program 0: openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80050000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x130, r2, 0x708, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x46}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc366}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x800, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffffffffff000, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2040000000000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') sendto$inet(r3, &(0x7f0000000300)="25932519bb831f03e1ec4677d4ff79249273e2415b1c49d3fde97f474963c8e5a9224c01509f982d68de3eddf6b920260a9a968a63ac641582d282734a5f755f8b6d2614bca881c0dbb341fb41286592ebd0766a13a92a9016b6b5e0b26000bd0a9c3a2d32552e1adb118db5e3812f660a9ed234d590d40042de60b4e35b58cd5be910eea19e6c05488894b6", 0x8c, 0x4, &(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0xffffffffffff0001}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 08:40:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xae, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f8"], 0x0, 0x0, 0x0}) 08:40:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80050000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x130, r2, 0x708, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x46}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc366}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x800, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffffffffff000, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2040000000000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') sendto$inet(r3, &(0x7f0000000300)="25932519bb831f03e1ec4677d4ff79249273e2415b1c49d3fde97f474963c8e5a9224c01509f982d68de3eddf6b920260a9a968a63ac641582d282734a5f755f8b6d2614bca881c0dbb341fb41286592ebd0766a13a92a9016b6b5e0b26000bd0a9c3a2d32552e1adb118db5e3812f660a9ed234d590d40042de60b4e35b58cd5be910eea19e6c05488894b6", 0x8c, 0x4, &(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0xffffffffffff0001}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 598.529708] binder: 18524:18531 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 598.541900] binder: 18524:18531 unknown command -1205852776 [ 598.547731] binder: 18524:18531 ioctl c0306201 20008fd0 returned -22 [ 598.567179] binder: undelivered death notification, 0000000000000000 08:40:31 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYPTR], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630d400000f5ffeab70c0c9a8102268241256a5ea5fcc1a3631933bd8ccb6bbd3231e5535fe6b3f50bffead738b1c809a9af72adee7950c86652225705d853585ccbcc7f4fae"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x5) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) write$binfmt_misc(r2, &(0x7f00000001c0)={'syz0', "bb2d2b808f667839ac72088cfebad2486f9ed0a51f0d629e0daee0ab6808774db78bb47dbff1c46bb7d0665c21b202850160b582000cea144646f2c67399fc2c28144b5f2e27cb84e907ce896b223eeb9a349380f091a7bf0dc4e5374925a7beb961622c2a9faeec0cd5ba87b3d84df78ca2a3099bf1848fc1a95f1ea880a1fdfbf44ae7fb89def228f203e5467e50dbeaf3cf2e36bc359c9d2a27de8985f477043af58d6d61ab7d204c329a928aeb07bff2d9ad1c6e5187c0b6b52bfff6f9faa8b578bcd590ae6ad7bd431bc1a892f5860836707aa4d308ce"}, 0xdd) 08:40:31 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x18) 08:40:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) [ 598.585184] binder: 18543:18545 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 598.597570] binder: undelivered death notification, 0000000000000000 [ 598.599249] binder: 18543:18545 unknown command -1205852776 [ 598.610147] binder: 18543:18545 ioctl c0306201 20008fd0 returned -22 [ 598.668626] binder: 18558:18559 unknown command 0 [ 598.673558] binder: 18558:18559 ioctl c0306201 20000100 returned -22 [ 598.681472] binder: 18558:18559 unknown command 1074619151 [ 598.687176] binder: 18558:18559 ioctl c0306201 20008fd0 returned -22 [ 598.695985] binder: 18558:18559 unknown command 0 [ 598.699774] binder: 18558:18560 unknown command 1074619151 [ 598.705993] binder: 18558:18559 ioctl c0306201 20000100 returned -22 [ 598.707232] binder: 18558:18560 ioctl c0306201 20008fd0 returned -22 08:40:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xcb, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d8"], 0x0, 0x0, 0x0}) 08:40:32 executing program 4: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)=@chain={'key_or_keyring:', r0, ':chain\x00'}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r0, 0x3, 0x7bb}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'sha384-ssse3\x00'}}, &(0x7f0000000200)="0e56c78da04caf050554230618515f772aec753fd7a54687e6deaaa10b9fac3ac76f59787a04fd5cd6c937e3c2711e9bda84d2869cc30d663e9b632c30f0a43cabb66c8b455b7cdb1921a93af3f63b386cb178004c30e998710aafa79728773d8834b19ba5386e675c05dca486867474e2f63057ac3cb586b6d091e3cd63a6f22416371d187b6a298b914a2af5767365fc2cafca815de6e5cb391043b176aad40583ff8f0d022ced9ba4ce5aed9ec78c27e2c2df0fa3aaa5afbe187c348da9a013ad7c1dd0d179fab79c2732dd962157dfe895090f38a6ab372641cd9adeaebde817ea3a6f9cedc4c2ad731d77811c3060bd2878d80a9d06fc3a128287afc3", &(0x7f0000000300)=""/169) 08:40:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) 08:40:32 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) alarm(0x9f0e) 08:40:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c4000000000ede02972650f8a850e20d923fb4dfac283547bbfa223761b1b1462f8f381ccdf2df6a38db4262df66c7d6a379f816786bc23c0e297bb1dd937ec78e0a685193e1019bee7ab79ba3321da5ffbbc33e9081c61972778ae51a50b24f8e2675b5080d5523ac0885b14b80449a3505682528a4db4ebfef4a26af94cb7a6dba521a0b90760e0f3859c8372d6ff00a9cbae90807d05b61c9078b52668c25a666387c1e05bc22a9671ca8ee2fc94a306eaa0f486b52035493b7160b5233f09980e51fef3b1de70bb7846f172c1897b174d6451a261dcd5569fd50ae2"], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0xa78, 0x4}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 08:40:32 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x18) 08:40:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xcb, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d8"], 0x0, 0x0, 0x0}) 08:40:32 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x18) 08:40:32 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='ramfs\x00\x9b\"WaH\x96R\xefry\xd3\xe4I\xf0\x03\xc2\xb84\"&\xe82\xce\xf6\xfd\xd4\xdb\x8f\xf1\x91\x82\x80\xa8\x97\x1d\xdeo\x04c\x1e\xc9\xc3{k\xd4\xbd\xb7pAC\x98\xf3\xa11(\xe0[\xe3\xff?\xa8', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x12) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) truncate(&(0x7f0000000680)='./file0/bus\x00', 0x0) [ 599.349859] binder: 18565:18569 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 599.361965] binder: 18575:18576 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 858a0f657229e0ed [ 599.364002] binder: 18565:18569 unknown command -1205852776 [ 599.379929] binder: 18565:18569 ioctl c0306201 20008fd0 returned -22 [ 599.382859] binder: 18575:18578 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 858a0f657229e0ed 08:40:32 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) fsync(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r1, 0x402c542d, &(0x7f0000000080)) 08:40:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) 08:40:32 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) fsync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0xfc, 0x80000000200003, 0x3}, 0x2c) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000280)=""/207, &(0x7f0000000380)=0xcf) setrlimit(0x0, &(0x7f0000000040)={0x4, 0x20}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000240)={'ifb0\x00', {0x2, 0x4e24, @local}}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sched_setparam(r2, &(0x7f0000000200)=0xffffffffffff9def) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x2}, 0x28, 0x1) 08:40:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xcb, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d8"], 0x0, 0x0, 0x0}) 08:40:32 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000080), 0x0}, 0x18) [ 599.428602] binder: 18583:18586 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 599.453102] binder: 18583:18586 unknown command -1205852776 [ 599.461412] binder: 18583:18586 ioctl c0306201 20008fd0 returned -22 [ 599.505082] binder: 18599:18602 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 57e68c0cbdf9e102 [ 599.521349] binder: 18599:18602 unknown command -1205852776 [ 599.527073] binder: 18599:18602 ioctl c0306201 20008fd0 returned -22 [ 599.527526] binder: BINDER_SET_CONTEXT_MGR already set [ 599.546048] binder: 18606:18607 ioctl 40046207 0 returned -16 [ 599.554091] binder: 18606:18607 unknown command 2 [ 599.558957] binder: 18606:18607 ioctl c0306201 200001c0 returned -22 [ 599.571865] binder: BINDER_SET_CONTEXT_MGR already set [ 599.571870] binder: 18606:18610 unknown command 2 [ 599.571882] binder: 18606:18610 ioctl c0306201 200001c0 returned -22 [ 599.577219] binder: 18606:18607 ioctl 40046207 0 returned -16 [ 599.582503] binder: undelivered death notification, 0000000000000000 [ 599.601554] binder: undelivered death notification, 0000000000000000 08:40:32 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x5, r5}, {0x2, 0x1, r6}, {0x2, 0x6, r7}], {0x4, 0x5}, [{0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000080), 0x0}, 0x18) 08:40:32 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0x7c, 0x0, 0x7f1e, 0x1, 0xc1, r0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000140)={0x4}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3a) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) tkill(r0, 0x16) 08:40:32 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() unshare(0x400) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xcc, 0x99c, 0x4, 0xe03d}, {0x3, 0x2, 0x100000001, 0x100}, {0x80, 0x80000000, 0xf5, 0x1}, {0x3, 0x9, 0xffffffff80000000, 0x5}, {0xd, 0x80, 0xf}]}, 0x10) tkill(r0, 0xf) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x2, 0x4, 0x0, 0x2b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:40:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xd9, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f630c400000000002e1f9bd0c8ce657982520b8985be65d8e105db94a5b2c83091c5c7c0edb92523448c8e724c4e479336aa4e1ed3c544790c300002332ee72a6e464b1df03124bec9bf4826a2e304f8ebbcb0ab515e35d150fe7024eb24e6715d53f4ff30b7cced2c1cd1c937e727d93cd163f2562f077652f91a9e0d69a605f7babb9a6b80bbc0cacf2bd7fbaecc70c97bd9d8217f42b6050f63a470eed06e9a0f945fc071f5ed9c04affc0f84cfaea5bc058a7bc576714a40d6c8c929a191a02893c4317958e0662d85cabd0efb43168a9f21de3dfcc00"], 0x0, 0x0, 0x0}) 08:40:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010004000001000000080012000200020000000000fa0000003000000002030000000000c6a80d0000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) 08:40:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48040000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x118, r2, 0x220, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fffffff800000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x431}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1318}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x30}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000040}, 0x8001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) 08:40:32 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x8}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_defau