0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ftruncate(r0, 0x3) 15:30:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:43 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x3000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r2 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='environ\x00', 0xfffffffffffffff9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}}}, &(0x7f0000000280)=0xe8) getgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) keyctl$chown(0x4, r2, r3, r4) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) mremap(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 191.157636] binder: release 7293:7297 transaction 229 out, still active [ 191.174470] binder: undelivered TRANSACTION_COMPLETE 15:30:43 executing program 2: socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x4, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) 15:30:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @remote}, &(0x7f0000000080)=0xc) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/129, 0x81) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, @dev={0xfe, 0x80, [], 0x1b}, 0x80, 0x8, 0x0, 0x100, 0x5, 0x800080, r2}) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:30:43 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) r3 = getuid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1ff, 0x4, &(0x7f0000000380)=[{&(0x7f0000000180)="52db9e81bcefd86c059e02d81158cdb70f8cdc00b2", 0x15, 0x974}, {&(0x7f00000001c0)="9f1f74b127a379359662fe707d94206ec3408e50fdff842135d9a386", 0x1c}, {&(0x7f0000000200)="7df7a538759ce16cb63bb5767bad55c52b39b3ee2f061df0b09da1302121e079ce6a9a909a18715db914b79eb33d5eb80de724810df9c4f24778696229e28f5853284cfdd5eb010a8c299e29c4812585bcdddb6cc96dbd2d4ae9baa9f996d0c150a615df1678211482a5c1fccc27c1cbc43f9aa4340bfe693b8b16b2fb64aadd42a551eca3c430b52b14c58b193caad29911bcc3dc22828610473e", 0x9b, 0x1}, {&(0x7f00000002c0)="c1134046d2cf0b9d5e28b822a50f997f42afd861aa134b51330d4655240d89f2bc5cd56dccbccc2d6da725c540ff191148053e8a5b767b233708f0d9b48db3ec84ac18747d49b9f4a2343120ebb8dcabd80737eba98b002a5bb17c37910c102a86a9b5d6e29123420ad96c52c5663543e913cbd96811a87d0043ab0f007fb421c692d67c7db4c64226b66b8a47d031fe39d9756effbeb81fd4edc3e3f3d0370bb493818750725aae86568e", 0xab}], 0x1200052, &(0x7f00000004c0)={[{@noquota='noquota'}, {@nodelalloc='nodelalloc'}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}], [{@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@measure='measure'}, {@uid_lt={'uid<', r3}}, {@pcr={'pcr', 0x3d, 0x2c}}, {@subj_user={'subj_user'}}]}) pwritev(r1, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 191.252814] binder: 7321:7323 ioctl c018620b 0 returned -14 [ 191.275552] binder: 7321:7323 ioctl c018620b 0 returned -14 [ 191.302833] binder: release 7321:7323 transaction 230 out, still active [ 191.321557] binder: undelivered TRANSACTION_COMPLETE [ 191.322732] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 191.344474] binder: release 7321:7328 transaction 231 out, still active [ 191.361937] binder: undelivered TRANSACTION_COMPLETE [ 191.400221] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 15:30:44 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000e24a00000001000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:44 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:44 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x3000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r2 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='environ\x00', 0xfffffffffffffff9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}}}, &(0x7f0000000280)=0xe8) getgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) keyctl$chown(0x4, r2, r3, r4) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) mremap(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000280)=0x1f, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x410, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40) 15:30:44 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) pwritev(r1, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:44 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) fallocate(r0, 0x2, 0x81, 0x80) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 191.767674] binder: 7343:7350 ioctl c018620b 0 returned -14 15:30:44 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) write$P9_RREADLINK(r0, 0x0, 0x99a) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) setns(r1, 0x4000000) 15:30:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x1005800) 15:30:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x40, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1000000003c) fcntl$setstatus(r1, 0x4, 0x42803) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x2, 0x0, 0xfffffffffffffff9, 0x2cf, 0x0, 0x8, 0x20, 0xb, 0x1, 0x480000000, 0x1907fd8b, 0x7, 0x2dd8, 0x6, 0x3f, 0x2, 0x3, 0x31, 0x400, 0x40, 0x9, 0xffff, 0x24a5, 0x3, 0x3, 0x0, 0x0, 0xffffffffffff0000, 0x9, 0x1, 0x1ff, 0x7, 0x8, 0x3b, 0xdaaa, 0x6, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x100000001, 0x6ca}, 0x0, 0x40, 0x7eba, 0x4, 0x45, 0x81, 0x1cf}, r4, 0x2, r3, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r5, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 191.827107] binder: 7343:7350 ioctl c018620b 0 returned -14 [ 191.837142] binder: release 7343:7350 transaction 233 out, still active [ 191.848902] binder: undelivered TRANSACTION_COMPLETE 15:30:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfe0966cf8f6a6f8e16dba5c1a3ac7c4258ca"], 0x90) [ 191.897745] binder: release 7343:7350 transaction 232 out, still active [ 191.912100] binder: 7370:7372 ioctl c018620b 0 returned -14 [ 191.932909] binder: undelivered TRANSACTION_COMPLETE [ 191.939218] binder: 7370:7372 ioctl c0306201 0 returned -14 [ 191.970462] binder: 7370:7372 ioctl c018620b 0 returned -14 [ 191.972993] binder: 7370:7379 ioctl c0306201 0 returned -14 [ 191.998279] binder: release 7370:7372 transaction 234 out, still active [ 192.012820] binder: undelivered TRANSACTION_COMPLETE [ 192.031023] binder: release 7370:7379 transaction 235 out, still active [ 192.057056] binder: undelivered TRANSACTION_COMPLETE 15:30:45 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:45 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002d6000/0x1000)=nil) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000280)='\x00\x159\x87\xdc\xa4\x82\xf3\xe40Z3\xe4\xcd\xbeG\xfb\xcf\x1f\xe2sq+vi\xecQ') openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r4, &(0x7f0000000180)=ANY=[@ANYBLOB="6c6f6164206563727970746673a5747275737465643a2c62646576626465765b766d6e657430766d6e657431204630303030303030303030303030303030303035207d3866646200"], 0x48, 0xfffffffffffffff8) pwritev(r3, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r5 = openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)=0x20083) ioctl$VT_WAITACTIVE(r0, 0x5607) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect(r0, &(0x7f0000000480)=@isdn={0x22, 0x9, 0x2, 0x81, 0xfff}, 0x80) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000200)={0x401, 0x4}) 15:30:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:30:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000002ffff51883bb478d0eed92e609f16e236ffc02c00"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f0000000180)=""/195}, 0x64) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010082}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0xe, 0x3, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x5}, [@typed={0xc, 0x39, @str='\'bdev\'\'\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x4000000) perf_event_open(0x0, 0x0, 0x0, r0, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x1ff, 0xfffffffffffffffa, 0x2, 0x8000, 0x1, 0x8}) 15:30:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)={0x3, {{0xa, 0x4e21, 0x1, @mcast1, 0x401}}}, 0x90) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000ea7ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:45 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000000c0)=0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@dev}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:30:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) link(0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) epoll_create1(0x80000) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) connect(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x474}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x1c}, 0x1c}}, 0x40005) socket$inet_tcp(0x2, 0x1, 0x0) [ 192.482403] binder: 7388:7393 ioctl c018620b 0 returned -14 [ 192.501152] binder: 7388:7393 ioctl c018620b 0 returned -14 [ 192.512956] binder: release 7388:7393 transaction 236 out, still active [ 192.521350] binder: undelivered TRANSACTION_COMPLETE 15:30:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) ioctl$KDSETLED(r2, 0x4b32, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0x200, 0x8, 0xa, 0xff, 0x6}) [ 192.598948] binder: 7409:7412 ioctl c018620b 0 returned -14 [ 192.621743] binder: 7409:7412 ioctl c018620b 0 returned -14 [ 192.632687] binder: release 7409:7412 transaction 237 out, still active [ 192.660587] binder: undelivered TRANSACTION_COMPLETE 15:30:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:47 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x100a, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)={0x3, {{0xa, 0x4e21, 0x1, @mcast1, 0x401}}}, 0x90) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000ea7ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0001000080000075"], 0x0, 0x0, 0x0}) 15:30:47 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:47 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) 15:30:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0xfffffffffffffc8f) prctl$PR_SVE_SET_VL(0x32, 0xb355) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x8000, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0xc}}, {@mode={'mode', 0x3d, 0x761}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x1ff}}], [{@obj_type={'obj_type', 0x3d, 'eth1user-\'self.md5sum'}}, {@context={'context', 0x3d, 'staff_u'}}]}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="3200000000000000c204800000000000315e486b07cf3a467b9fa70e08f962d2639e304a8e0e744c27bf0a832fd82cec0ff70ed05610ee861743297dbdba19b215df3feb7915efd8a7c77989ad"], 0x10) 15:30:47 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) waitid(0x40000003, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x20141042, 0x0) sendfile(r3, r2, 0x0, 0x2008000fffffffe) 15:30:47 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 194.922687] binder: 7429:7437 ioctl c018620b 0 returned -14 [ 194.942669] binder: 7429:7437 ioctl c0306201 0 returned -14 15:30:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x80000000, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffffffffffe}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000a062cca68733170500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00be000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004aea60770372ddeafd602d16a947f190b8760bdd7ddd05e181d09204ba6db0a9d656f7a0ceaa9fe771edba6"], 0x190) socket$netlink(0x10, 0x3, 0x9) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000002e00000000000000000000000000000000000000000002001f000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="000000b4fb1d873a"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) eventfd(0xff3b) [ 194.971355] binder: 7429:7437 ioctl c018620b 0 returned -14 [ 194.977959] binder: 7429:7446 ioctl c0306201 0 returned -14 [ 194.992211] binder: release 7429:7437 transaction 238 out, still active [ 195.005387] binder: undelivered TRANSACTION_COMPLETE 15:30:47 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:47 executing program 1: pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000000847f9) openat(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) 15:30:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a00f37358177dab9cf686") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080)={0x10000, 0x0, 0x1, 0x7, 0x1, 0x58dd}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 195.068966] binder: 7460:7461 ioctl c018620b 0 returned -14 [ 195.099255] binder: 7460:7461 got transaction to invalid handle [ 195.111082] binder: 7460:7461 transaction failed 29201/-22, size 24-0 line 3117 15:30:47 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000300)='ev\xe9rfn\x00\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x128, r3, 0x210, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x663e}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4fc7}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="c3ec488b4102a508d9b9b16f39f2630f"}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4cab}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x40000) write$P9_RREADLINK(r2, 0x0, 0xffffffffffffff35) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r2, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 195.134084] binder: 7460:7461 ioctl c018620b 0 returned -14 [ 195.148898] binder: 7460:7471 got transaction to invalid handle [ 195.155837] binder: undelivered TRANSACTION_ERROR: 29201 15:30:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000fe0100000000000000000000000000010000000000000000000000000000b63ba97bdb13f0b9000000000000000000800000000000160000000000000000000000000000000000000000000000000000e7d53cd40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) 15:30:47 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfa2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 195.178941] binder: 7460:7471 transaction failed 29201/-22, size 24-0 line 3117 [ 195.188128] binder: undelivered TRANSACTION_ERROR: 29201 15:30:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000017c000000000000000000000000ccd50a714ce99600000100000000000000000000000000000000e7000000000000008566e798895ad871c100000000000300000000000000000000000000005ccf531ba09fc7f9cee03b37422f171000"], 0x90) 15:30:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r1, 0x9, 0x8, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000000000000007f00f7431023f5601248cdade4d82fda5f635fbd44161973b14e13dbecb56575f2450b933035c43c10c649048b8a502a33af0e9cd32e8aae6e06a278f0dde9d078fcc409415ea5a58cfe95cba9c7387106a0115e26b2bd37f232e29d8c7a3a387aa2d433b1b46739dbce51e9ccda84feaaf116248bb6aed4a7f8c4e97c9902fd32437d5f306ca8a7ac2e8893044a4bc0edd769db5bab7ef40a902e964d41"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 15:30:48 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000140)) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:48 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) 15:30:48 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:48 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x22, 0x0, 0x7}}, 0x14) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) recvmmsg(r0, &(0x7f0000001080)=[{{&(0x7f0000000280)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000440)=""/63, 0x3f}], 0x5, &(0x7f0000000500)=""/188, 0xbc}, 0x3e}, {{&(0x7f00000005c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/45, 0x2d}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000980)=""/99, 0x63}, {&(0x7f0000000a00)=""/152, 0x98}], 0x8, &(0x7f0000001440)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000000b40)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/149, 0x95}], 0x1, &(0x7f0000000cc0)=""/109, 0x6d}, 0x2}, {{&(0x7f0000000d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000dc0)=""/227, 0xe3}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/203, 0xcb}], 0x3, &(0x7f0000001040)=""/50, 0x32}, 0x2}], 0x4, 0x100, &(0x7f0000001180)={0x0, 0x1c9c380}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000027c0)={@initdev, @multicast2, 0x0}, &(0x7f0000002800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002940)={&(0x7f0000002840)={0xd8, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xd70f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x44081) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2020064}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x3, 0x9, 0xffffffffffff4cfa, 0x200}) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x20000000000000f) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 195.749979] binder: 7496:7503 ioctl c018620b 0 returned -14 [ 195.761934] binder: 7496:7503 ioctl c0306201 0 returned -14 15:30:48 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x200000000000006, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffff001, 0x9, 0x0, 0x3, 0x10, 0x2, 0x2, 0x8, 0x100000001, 0x8, 0x7ff, 0x4, 0x2, 0xd87, 0x7, 0x7f, 0x0, 0x9, 0x1, 0x9, 0x7fff, 0x9, 0xfffffffffffffffa, 0xfffffffffffff5ca, 0x94b, 0xffffffff, 0x3ff, 0x8, 0x3, 0x7b06, 0x80, 0x2, 0x8, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x800, 0x200, 0x3, 0xe, 0xffffffffffffffbb, 0x26f, 0x4}, 0xffffffffffffffff, 0xd, r1, 0xb) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:48 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x1, 0x70, 0x8, 0xff, 0xfffffffffffff800, 0x80000001, 0x0, 0x8, 0x91500, 0xd, 0x40, 0x9, 0x81, 0x1, 0x8, 0x7, 0x2, 0xc4, 0x8, 0x0, 0x1, 0x1, 0x7, 0x2, 0x6, 0x0, 0x4, 0x4, 0x0, 0xfbf, 0x1, 0x4, 0x15f7, 0x6, 0x7ff, 0x6dad, 0x5, 0x0, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000140), 0x1}, 0x51, 0x4, 0xbbf4, 0x9, 0x101, 0x22e6, 0x4}) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x4000, 0x1) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r4 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) fstat(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) fstat(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000b00)=0xe8) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000c00), &(0x7f0000000c40)=0x0, &(0x7f0000000c80)) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000d80)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000e80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f40)={{{@in6=@ipv4={[], [], @remote}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000001040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) sendmsg$unix(r2, &(0x7f0000001240)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="2f68ad2236ffe2d88d12d1623951e99914a76971904d4a6a8446037af3cfe5aaebb093d2e4a63172e84fef1dc70651c7ca9c1a29e404452d94dcd4baa5801d4a4f94c5be60b141d99f54d2b1c3cba91abbc7edf91506c40bb056b4fdcf30f1440234eb3d795a993698b41912c27c31e998251c68ad9db890da0a8137c5af24404bb58def82360614cf44d5ff3e05ccc2e601fde676c7e84c763aa9d0922d0e68053e3dff85be6f160423769c1111364b02521b4106", 0xb5}, {&(0x7f0000000400)="0a4b99b195dc6ac0aa0305edb4fd7d9c8ee8ed832d060b270c145b9b71944b6bb34f571d6d0d59cd673fef7a942579a5223dcba20da29c62a472d18855b2aa51e01211a755b04f9556f677b10ec94c4c01da668ec4dde868ad15e57e3830c2af0bf85865da698281805d5655ce67131a66b8eeffa64a41510eb2957ad02f3a0b9443fe24b6e7b5a09d67965ea8f100347c9ac5edaf91ec17f6b1285d", 0x9c}, {&(0x7f00000004c0)="add5efc3c5600608923682ae3d1b8fcc84f99c21f8", 0x15}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000500)="16ed45cb92be5cad35f706badd58917a6d2e60e01c7a966791154ab0f1be215c9f9a3f508e68697973f4e66d4ac005d1fdd046214ed163a28b2b00f5d83e64470b841f07a66eff2724a8b07321a8bd4ac4cf9277222da52ba3885dd994549097060ca9277d9b8dd9332c3fc54730ee5507ab295d2161cab1d772686566b32f8b3d", 0x81}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="8f676ee8acd1ec4f623a3496c8bdcb42a321cee9d55e63b7dda82ec2b2514c6d7b16e0dcd9899fa2d15122bdd67394447a7d7c2ee2026fad3ddd20453e43fca6900384dc6a922a6cd31481a55b3b2a90100ce0b1efb95a6a3bcc2e7f4d0e8b23ff3728abc5", 0x65}, {&(0x7f0000000680)="a0c168469f7eceb4267542ed8d16a8f24047157a48811ad54e4cf8e0c168009aa123f88bdb0e44ee000fa9b50342a234bb9f9d4a90ad620db2746200b924", 0x3e}, {&(0x7f0000002440)="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", 0x1000}], 0x9, &(0x7f0000001100)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="010000000200ef00", @ANYRES32=r4, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000010000000000000000100000001000000"], 0x120, 0x800}, 0x48001) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x1f, 0x2, 0x1, 0xcf, 0x0, 0x2c4c, 0x1000, 0xc, 0x3f, 0x80000000, 0x4, 0x1ff, 0x8, 0x0, 0x3ff, 0x3, 0x81b, 0x5, 0x3, 0xffff, 0xd1df, 0x3, 0xfaba, 0x80000000, 0x40, 0x4, 0x7ff, 0x6, 0x100000000, 0x1000, 0x1c, 0x7fff, 0x1, 0x3f, 0x1000, 0x8, 0x0, 0xffffffffffff7fff, 0x1, @perf_config_ext={0x9, 0x8}, 0x100b, 0x3, 0x400, 0x6, 0x9, 0x6, 0x200}, r4, 0x0, 0xffffffffffffff9c, 0x8) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') r18 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r18, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r18, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 195.795960] binder: 7496:7503 ioctl c018620b 0 returned -14 [ 195.834263] binder: 7496:7518 ioctl c0306201 0 returned -14 15:30:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x200800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="8c2a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 15:30:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000004, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000000d9404f8f3b095d91494bf87768c5721300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 195.850310] binder: release 7496:7503 transaction 241 out, still active [ 195.861081] binder: undelivered TRANSACTION_COMPLETE 15:30:48 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0xea6c6d7}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) 15:30:48 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x100, 0x2, 0x7fffffff, 0x2, 0x3, 0x81}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') setrlimit(0xf, &(0x7f0000000100)={0x728, 0x3f}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0) pwritev(r2, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xb, 0x9, 0x9, 0x5}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10) 15:30:48 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008918, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet6(0xa, 0x80004, 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) open(&(0x7f00000000c0)='./file0\x00', 0x200841, 0x40) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[], 0x0) 15:30:48 executing program 0: rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f00000000c0)="8fe978c69d0000002065660f71e12bc4628d3de9c4a2f0f39f5c000000660fc4e10a02c12b0bc4615c55ac2f7d000000f247f616af", {0x7}, 0x80000001, &(0x7f0000000380)="f3400f108f21000000410f38042df3ffffffc4611158e9420f77c40211ba9a00000000f3460f5b2d510f00000f6afac4429d2b1c6a430feec1c441f157c5"}, &(0x7f0000000100)={&(0x7f0000000180)="c4a3d5684a2cedc4823af5bf00000000366566420f165e38660f3a6392a0b7448900c482f920560366400ffbccc4e2d9a8b1c5b15737c4e27d18e90f9ce766460fe4f8", {}, 0x0, &(0x7f0000000240)="c462098c88792e0000c4417571e500470ffd8e000000003e2647abf2436d67660ff9e00fa9c48289472ec4e271987056c4817850d1"}, 0x8, &(0x7f00000002c0)) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) [ 196.045159] binder: 7550:7552 ioctl c018620b 0 returned -14 [ 196.067685] binder: 7550:7557 ioctl c018620b 0 returned -14 [ 196.094220] binder: release 7550:7557 transaction 243 out, still active [ 196.103610] binder: undelivered TRANSACTION_COMPLETE [ 196.120224] binder: release 7550:7552 transaction 242 out, still active [ 196.142730] binder: undelivered TRANSACTION_COMPLETE 15:30:49 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') prctl$PR_SET_ENDIAN(0x14, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() fsetxattr$security_smack_entry(r1, &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000200)='environ\x00', 0x8, 0x1) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) 15:30:49 executing program 5: pwritev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000100)="bcf3e7432e784e610d22c4f0e3421340d03327481bc5c62934d452ff65ae2cd979648829f89071688b94f65d5d0f5f1c34589531d7b452105083ca8ae717b97e2b505541e26ace64ba72eeb241d5f9a9d4ed744b8ed17b71858173576c452bf4dc3f5f352f77c221e3f4dd792a328d334b1369075e09d693194943587785e0361eb50d3ebdcd8f478429208466aaacc3e3d27cff71d953b84c7ab6479f83ed573ebb0e3eb1e424ee531b8aab8f31c97c53936896db"}, {&(0x7f00000001c0)="56b7a950eef518edbcd4537a6df84a458145045018c96e66eacd530b0375c34283"}, {&(0x7f0000000200)}, {&(0x7f0000000240)="d03e9a9645287709c099973c64b3978d3fcd9336dbd6767be905f777e745a90692da8d906738ed2465707d121c2c61ffc75f8b13ad3c3a056130e6599d37fd33029a065ee006f44fb1e779d02a3ccfc6d67479d1caa29a48d5b8cbcdc36380c127d7820585c5571c85d4a071469e50d40a332512668696d22533ae6c37b600481e75"}, {&(0x7f0000000300)="21b5c743490cab2940bc427d3f7c94b36e709d75f33017ef65b7501497424c2d706186b6868b6cf7658cd68979ad4550c45ef1028553c98bffec6230e2b781fc6494932cc3ddf7752bb888709a7d340260a578b458f3d65f1974074ddaab8b4804223091a98cc4edb7d3581fe6302360cb9a6c931600948e03f702aee21d77646c11687dceb2582c9032d00abce478dc651a4368104778cea7c514"}, {&(0x7f00000003c0)="e6ceb87d16ede678fac5b0ca14e4b80ce94cf575693e74d07d8c6772474d522e845fd080c77b349b0760b6dfdf84b9e2da1e1ce71b1957418e5afb71fb277871497117e546d0fbd1c1ce00a13c1a027164fd4d28741c1472f321811c0591fd1a6840dfd4f7e047f89e5079ca4019519c915660e8defc189b0c11d86d95bbe1c7a68d43e0d82909e98e75ffc5d4856c2c7423e2c371d6395016540e1f0b02d9ceef27ba92c3ab7474050a61f996361d56030fcde00619ad363564ba56ad65affab2647922c65ba9366d0192a6a8536043b3e951dbb649daece53c73980976d4f46ee02d5be2f1bc3684fb39b0bae5805e", 0x9}, {&(0x7f00000004c0)="bfcab4f784faf8af7e890ec6ca2229c0890897849bf308ff704267344887c1c7279f6ca58fc9e9bac8b7d1b90b87564440bbeb8478219555d6d8321aa5"}, {&(0x7f0000000500)="93c34a0e8c9cb5fa38af1d1f4f28029626a8b5b194a641f188b0c9baae4d1fe792ce4bc773b90777073416a793d99cea728ee599268f1f8280e3651d10c8a57be43628c6a196d54eadccdb20b07c984bb099c675e8c548e09e430a35b39248288cb590f5d6adf1f5c0ecab0771b2397bff484577ab96b5a4e3293f28ec3475bd8db8f659e1abbc0ba9180b7f59f124c59524502658607520fdd4ece244ad21d51797ba8cc026d3b8e2ba3f96ad71234ad8923cd546e34bc84a2183241a45333f1e5d684586c284e79be09d9d025a827dd1eb8d92ef"}, {&(0x7f0000000600)="38ee248bfbcc82cf383e618b5bfa0c7c07be1c13c0908ce4f7b848f96a7d81bc13e89e01dd6c53f1b1d3d1eb1807248d5884ba509109a69a3d1091fd67b82ce8cb436b01972b8d1dda8fb9fc29624e06052990baa17c059cfe80b5c4c23869d28cecec2391e0cf1254b102b517b2f692cacd3693a1709925425f6ac3cd024cb52d3285bdfbce997f66c9f1080442c1badcc5bc7b7e25aa2e6e5db162b6a5ae9332dbef1d6c6fff62ef1b5cb76acc18d2"}], 0x100000000000017a, 0x4000) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:49 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$selinux_context(r0, &(0x7f0000000080)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0xfff, {{0xa, 0x4e23, 0x1fe, @empty, 0xde}}}, 0x9) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="0100000000f5ffff0900000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff0000000000000000000000000000"], 0x90) 15:30:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$TIOCSCTTY(r1, 0x540e, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:30:49 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) 15:30:49 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x1, 0x70, 0x8, 0xff, 0xfffffffffffff800, 0x80000001, 0x0, 0x8, 0x91500, 0xd, 0x40, 0x9, 0x81, 0x1, 0x8, 0x7, 0x2, 0xc4, 0x8, 0x0, 0x1, 0x1, 0x7, 0x2, 0x6, 0x0, 0x4, 0x4, 0x0, 0xfbf, 0x1, 0x4, 0x15f7, 0x6, 0x7ff, 0x6dad, 0x5, 0x0, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000140), 0x1}, 0x51, 0x4, 0xbbf4, 0x9, 0x101, 0x22e6, 0x4}) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x4000, 0x1) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r4 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) fstat(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) fstat(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000b00)=0xe8) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000c00), &(0x7f0000000c40)=0x0, &(0x7f0000000c80)) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000d80)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000e80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f40)={{{@in6=@ipv4={[], [], @remote}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000001040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) sendmsg$unix(r2, &(0x7f0000001240)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="2f68ad2236ffe2d88d12d1623951e99914a76971904d4a6a8446037af3cfe5aaebb093d2e4a63172e84fef1dc70651c7ca9c1a29e404452d94dcd4baa5801d4a4f94c5be60b141d99f54d2b1c3cba91abbc7edf91506c40bb056b4fdcf30f1440234eb3d795a993698b41912c27c31e998251c68ad9db890da0a8137c5af24404bb58def82360614cf44d5ff3e05ccc2e601fde676c7e84c763aa9d0922d0e68053e3dff85be6f160423769c1111364b02521b4106", 0xb5}, {&(0x7f0000000400)="0a4b99b195dc6ac0aa0305edb4fd7d9c8ee8ed832d060b270c145b9b71944b6bb34f571d6d0d59cd673fef7a942579a5223dcba20da29c62a472d18855b2aa51e01211a755b04f9556f677b10ec94c4c01da668ec4dde868ad15e57e3830c2af0bf85865da698281805d5655ce67131a66b8eeffa64a41510eb2957ad02f3a0b9443fe24b6e7b5a09d67965ea8f100347c9ac5edaf91ec17f6b1285d", 0x9c}, {&(0x7f00000004c0)="add5efc3c5600608923682ae3d1b8fcc84f99c21f8", 0x15}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000500)="16ed45cb92be5cad35f706badd58917a6d2e60e01c7a966791154ab0f1be215c9f9a3f508e68697973f4e66d4ac005d1fdd046214ed163a28b2b00f5d83e64470b841f07a66eff2724a8b07321a8bd4ac4cf9277222da52ba3885dd994549097060ca9277d9b8dd9332c3fc54730ee5507ab295d2161cab1d772686566b32f8b3d", 0x81}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="8f676ee8acd1ec4f623a3496c8bdcb42a321cee9d55e63b7dda82ec2b2514c6d7b16e0dcd9899fa2d15122bdd67394447a7d7c2ee2026fad3ddd20453e43fca6900384dc6a922a6cd31481a55b3b2a90100ce0b1efb95a6a3bcc2e7f4d0e8b23ff3728abc5", 0x65}, {&(0x7f0000000680)="a0c168469f7eceb4267542ed8d16a8f24047157a48811ad54e4cf8e0c168009aa123f88bdb0e44ee000fa9b50342a234bb9f9d4a90ad620db2746200b924", 0x3e}, {&(0x7f0000002440)="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", 0x1000}], 0x9, &(0x7f0000001100)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="010000000200ef00", @ANYRES32=r4, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000010000000000000000100000001000000"], 0x120, 0x800}, 0x48001) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x1f, 0x2, 0x1, 0xcf, 0x0, 0x2c4c, 0x1000, 0xc, 0x3f, 0x80000000, 0x4, 0x1ff, 0x8, 0x0, 0x3ff, 0x3, 0x81b, 0x5, 0x3, 0xffff, 0xd1df, 0x3, 0xfaba, 0x80000000, 0x40, 0x4, 0x7ff, 0x6, 0x100000000, 0x1000, 0x1c, 0x7fff, 0x1, 0x3f, 0x1000, 0x8, 0x0, 0xffffffffffff7fff, 0x1, @perf_config_ext={0x9, 0x8}, 0x100b, 0x3, 0x400, 0x6, 0x9, 0x6, 0x200}, r4, 0x0, 0xffffffffffffff9c, 0x8) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') r18 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r18, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r18, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:49 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x4, {{0xa, 0x4e21, 0xa35, @mcast1, 0x2d0}}, 0x1, 0x3, [{{0xa, 0x4e24, 0xffffffffffffff59, @loopback, 0x40}}, {{0xa, 0x4e23, 0x4, @rand_addr="a2497bd949694c6175ac271e61351f0d"}}, {{0xa, 0x4e20, 0x8, @local, 0x81}}]}, 0x210) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000071fbfc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022c9696764683aeb82d1a54bd930535f"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:49 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x2, 0x9, 0x6, 0x3f, 0x2, 0x6}) pwritev(r0, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 196.545719] binder: 7561:7571 ioctl c018620b 0 returned -14 [ 196.564462] binder: 7561:7571 ioctl c018620b 0 returned -14 15:30:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000010000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0706000900f5400000"], 0x0, 0x0, 0x0}) 15:30:49 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) sync_file_range(r1, 0x4, 0x3b, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{r2, r3+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000200)) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) sync() pwritev(r4, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001440)="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", 0x1000) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x1000, 0x2000) [ 196.598563] binder: release 7561:7571 transaction 245 out, still active [ 196.631371] binder: undelivered TRANSACTION_COMPLETE 15:30:49 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x0) r1 = openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x100000000, 0x7}, {0xffffffff, 0x100}], r2}, 0x18, 0x2) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f00000001c0)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="b7cc1dc466827168c1b263542c535096ecd02ad4247156b8a500ce58374d9a20106f8fc0b44d4f4254779a05a023b05aee3ade6ed64b9df2f99ce4747b6d55be5402c64d32c2996c7ecd308481ca90f2acafedf337114474c1e4a1d3d56acb59ac9b3f23119fabe1518913b8b5b430", 0x6f}, {&(0x7f00000002c0)="22fe89c155fbdc7d5ce3369e18fdb02c5911c73a8a2059e557e8af3f9356706f06a380c4f91b825272a61a843ca0c6844d435c9816bdfd3ca07578773e29fe09075f9e8d31e35a9db97a564fe21ba417e9143d1a6ddc43cffbb351937dbc628e8665a9aadb3fd315f00d79da93ed61a6c59868ab22354c11b9ae797b23286359afc8887ef0933c524a8c80c67731e7d6882e8b0052443e662326f61a24080e121c20a403", 0xa4}, {&(0x7f0000000380)="2673c407d94d7e8abbdc17ae306d29c70d7c55dfbd0e66a552c37b68b36d2036c1dcbf81f81ca18e857c9bd8d3bc6a21d7283a125bf2ad934847e576da702937d7507078b5a78721dce4b53908f3d85bb636b92c91a3e870b11c800b890ed6170f0ef7e04344259b85e5c678a6639f76b5c6c52f9814c524ce8d8e31d5d6e2748776cbb242fc3a82e28bd8a44cec3df9cf67089a0f6b76d88b22d51842bda9531816684f240bd1ddb15922024ff453acc4041de3903a65ed4a63c244907a50347cd186f5470478b87e41", 0xca}, {&(0x7f0000000480)="2c681878fe336a7009a1a3e32fc0f89a51f26d5d885b2f58a9641f465b5c87010099429a354953f41bb8a2c499f91cd736b51cf7b8d8ac552d8fc6d49bfd16a88d5dae924db70834988e023b0ac3a1e33fb676c912d2917c962fcd63d60224a9026ed5cb25153eaea9e4be54ce89815a1cf9d370fbb26cfbcaa979b10dae67e84332db9a2c7dc3c94b94584cb008278fc098d8290e6e06c6b1b457ff71d0cd5bcc624db115af1a909d336079f4bb1115995c3b5b2a4232845769c7eb1bbf51ca4255afa50bf8964335a9ea6fd5c2e9e8c1ad229aa33d726568181117ae3375c4", 0xe0}, {&(0x7f0000000580)="66d1cb1c7f9a047500b0e3e3584ad0d109a83bbcfc8eea91465c2bfcceb0d3358b6481c5899d74e8be21c1029cfcafbb8a1e19", 0x33}], 0x5, &(0x7f0000000640)=[{0x20, 0x105, 0x3ff, "d301d36e82a76d26a5faeab9e45a"}, {0xe8, 0x105, 0x741, "1389b37a8518aa096b29118f1e4d3944a7f2e761729fa0c6919b21f934c8d3736ec3198cc82f778b4db4a4f9887c2b5f80143d3fc02057a5dcb6df90ba46825a89d39f5a60f796f2cd9004d9bc96d1b1b26f570d584e5f33561147d54f34645e3894b988a5557eed2b152d57071b7bda833a7b02242a7096a737322bb8dd15cd8fce80ba3464963c9d2532eab10fd0929ac2f4792c001584ad3dcb5785ce250fcbdcc11d635854cfce164ed8c92d97b9bd839a3a1f425eb10f61a536895ac7298947f7c18697ced7d4d0c1b3b91fd58d00d3b1255aac57"}, {0x38, 0x1ff, 0x81, "1de95b48c640ce17b8aa6845772225de3f6059c749a84ade0c911f3b19f81dd39cfc0a"}, {0x80, 0x101, 0xfffffffffffff122, "a2ca0d5f8bdd25d45a00d970d20a379b3dc5dd6489cc0dc0b687ea508ba6e4f619c33fe4d8b36081ad7fd9f66aab99f76f8255543f9f31c089bb5219cf4247fa20cbad5794e85a3fcc06a0a5056768ef9f49105af80642784b2f51b827106ac145fbbadd1e9f8486a951cd493faf4451"}, {0xd8, 0x107, 0x9, "532a2f17023868ceac9bbfbe377addf4cf14587dd94df9d124a336d64c9f8b75994671c65b967fcaa6d73bfe651589e5e7ec34f17842ac9505af7d15d83f22a4331db1d9015c2b3a899ed4df2758432861cb66a4ed5bf96bae8f2d3680aecf9cfb902260051e903b2f00097c3b04f226ec11391194a2c0e2b5600aaa2c0095afdd9ac776d6f5abbe2e43665f4aed18620f745bd86329eee48b882f218e792183168af88a8ab2486b63b605f0e2da640fe695bd515e15669e86eae5dfc26c45dbe47bee8203e2a9b7"}, {0x110, 0x108, 0x3ff, "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"}, {0x60, 0x115, 0xab, "92e103cd3165719d74ab0f23979ea3c4c11035427ab0794ba431404fc7389cb0da2680e2ee63e970286cded2fbb2509a9d2062419f60dcd18813d5a6372976a213b0f38258421a0369deb407ef"}, {0x108, 0x119, 0x6, "23daf5c38adedf7b500dd7872c8765d217d6c9b4b6bf91afe1f29a0849e35a53510c10eacb6459d5495b72506f130708afb626dff53bb0ab57a6e158de1cd1aedeba384cfc4af3265202db8dd20933711b3f87ade61441415bfdd8c2a486197b21e82dcd8a4ea6ea26007356182b74e74f6bfc76e13ffc4c2d3f4ba34600082360b8ce958f9b9e6835a0a3ff194fa8259923d043e9ff33d028b84ab1207f20b13ea083371f0a2703f8608dbe515771c3956cdc4a95ade927d3a73aaa4413418d3ed5c662909aacc6c0323ee3944bcc733a04fdec9da305cc287e8b3f366778acb548858f0b65bde0921306e3fc46bd8de2e0b3"}], 0x510}, 0xfffffffffffffc01}], 0x1, 0x4000000) socket$netlink(0x10, 0x3, 0x1a) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000c40)=""/165, &(0x7f0000000000)=0xa5) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='TIPCv2\x00', 0x7, 0x1) [ 196.652389] binder: 7587:7590 ioctl c018620b 0 returned -14 [ 196.659507] binder: release 7561:7571 transaction 244 out, still active [ 196.689128] binder: 7587:7590 ioctl c0306201 0 returned -14 15:30:49 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0xffffffffffffff90, 0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000100)='net/fib_trie\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r3, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) syncfs(r1) [ 196.716934] binder: 7587:7590 ioctl c018620b 0 returned -14 [ 196.727322] binder: 7587:7598 ioctl c0306201 0 returned -14 [ 196.738314] binder: undelivered TRANSACTION_COMPLETE 15:30:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = dup(r0) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0037000000000000e132e94bc937650683237cb2f1f65c06a7ddbb0a572e3ba54337f8dba272673a7c5afd6706350727ea66a9919173a3c3c4b039be000985326879869743f15f899cc520e845233349bcaf269ba740bf7aa391d615ef36a75a25c57ca5ab882687041a3f56a5a5c280992be3b802acffca5d7b6dec13"], 0x0, 0x0, 0x0}) [ 196.760864] binder: release 7587:7590 transaction 247 out, still active 15:30:49 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) fsync(r0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 196.791969] binder: undelivered TRANSACTION_COMPLETE 15:30:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x480082, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 196.817461] binder: 7608:7611 ioctl c018620b 0 returned -14 [ 196.827223] binder: release 7587:7590 transaction 246 out, still active [ 196.853685] binder: 7608:7611 ioctl c018620b 0 returned -14 [ 196.871080] binder: undelivered TRANSACTION_COMPLETE [ 196.903371] binder: release 7608:7611 transaction 248 out, still active [ 196.924326] binder: undelivered TRANSACTION_COMPLETE 15:30:49 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:50 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) sync_file_range(r1, 0x4, 0x3b, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{r2, r3+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000200)) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) sync() pwritev(r4, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001440)="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", 0x1000) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x1000, 0x2000) 15:30:50 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000200)='environ\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r2, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 15:30:50 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f00002d3000/0x4000)=nil, &(0x7f00002d6000/0x1000)=nil, &(0x7f00002cd000/0x12000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00002cf000/0x2000)=nil, &(0x7f00002dd000/0x3000)=nil, &(0x7f00002cd000/0x2000)=nil, &(0x7f00002db000/0x1000)=nil, &(0x7f00002d9000/0x4000)=nil, &(0x7f00002d5000/0x2000)=nil, &(0x7f00002d4000/0x2000)=nil, &(0x7f00000000c0)='I.,FHX', 0x6, r0}, 0x68) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffff9c, 0x24, &(0x7f0000000040)={0x1, 0x3, 0x1, 0xce8, r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000080a0000f58eb9b6b5c8d729570405d9b32d7c278f33f42027cc763ddafc441b588f629f3fec234caccfe12d27e1bccea88238ed761a331406343522de144f64bf74da377af0470600ceba8d2c32d43675ec44d89291c76eeb448a9f53e6c8f09f702af58ca35a15771581a10e207104db95fe7b2926ff90319854643bf3c9e7d95486a370811f23c44953746e3781218825654f6baa2f96ee12701439913d984b28d0a4d58611b60c69eeed959a2888ac0bb1ed43e7010febe6958acf74f2f0fb6a82c798092183e96a3c2c68806b9f150dadbd0953a442c4e63024d827af1ff91bc73569b55b"], 0x0, 0x0, 0x0}) 15:30:50 executing program 4: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x7fffd, 0x8084) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) [ 197.338491] binder: 7629:7637 ioctl c018620b 0 returned -14 [ 197.358335] binder: 7629:7637 ioctl c0306201 0 returned -14 [ 197.368830] binder: 7629:7637 ioctl c018620b 0 returned -14 [ 197.375813] binder: 7629:7642 ioctl c0306201 0 returned -14 15:30:50 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) 15:30:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x9, 0x1, 0x6, 0x80, 0x0, 0x7, 0x10000, 0xc, 0x9, 0x20, 0x6, 0x5, 0x6, 0x38000000, 0xc0bc, 0x0, 0x9, 0x7, 0x1, 0x7, 0x3, 0x800, 0x5, 0x200, 0x80000001, 0xd9e, 0x1, 0x81, 0x400, 0x3, 0x7, 0x100000001, 0x10000, 0x80000000, 0x7, 0x7fff80000, 0x0, 0x2, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x410, 0x9, 0x1000, 0x7, 0x0, 0x100000000, 0x1ff}, r1, 0xf, r2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2, 0xfffffffffffffe01}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x3) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 197.384371] binder: release 7629:7637 transaction 249 out, still active 15:30:50 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r1, 0x0, 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7fff, 0xf7b4) ptrace$setopts(0x4206, r1, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) prctl$PR_GET_CHILD_SUBREAPER(0x25) tkill(r1, 0x38) timerfd_create(0x2, 0x800) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ftruncate(r0, 0x8001) 15:30:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x208000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) [ 197.412679] binder: undelivered TRANSACTION_COMPLETE 15:30:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x4, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r1, 0x587c, 0xb25, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)={r2, r3+30000000}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @empty, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={@loopback, @dev={0xfe, 0x80, [], 0x12}, @mcast1, 0x7f, 0x9, 0xb7, 0x400, 0x6, 0x2, r5}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:50 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) mmap(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x1a) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 197.462455] binder: 7652:7656 ioctl c018620b 0 returned -14 [ 197.494251] binder: 7652:7656 ioctl c018620b 0 returned -14 [ 197.503120] binder: release 7652:7656 transaction 250 out, still active [ 197.516285] binder: undelivered TRANSACTION_COMPLETE [ 197.528889] binder: release 7652:7660 transaction 251 out, still active [ 197.538107] binder: undelivered TRANSACTION_COMPLETE 15:30:50 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x9, 0x1, 0x6, 0x80, 0x0, 0x7, 0x10000, 0xc, 0x9, 0x20, 0x6, 0x5, 0x6, 0x38000000, 0xc0bc, 0x0, 0x9, 0x7, 0x1, 0x7, 0x3, 0x800, 0x5, 0x200, 0x80000001, 0xd9e, 0x1, 0x81, 0x400, 0x3, 0x7, 0x100000001, 0x10000, 0x80000000, 0x7, 0x7fff80000, 0x0, 0x2, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x410, 0x9, 0x1000, 0x7, 0x0, 0x100000000, 0x1ff}, r1, 0xf, r2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2, 0xfffffffffffffe01}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x3) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0xc, 0x20, 0x30000, 0x77, 0x7f, 0x1f, 0x4696, 0x7df2611a}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000001c0)) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffd) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0x0, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x10, 0x4, 0x4b}, 0x2c) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r3 = syz_open_pts(r0, 0x2) dup3(r3, r0, 0x0) write(r0, &(0x7f00000005c0)="ca070577c73901f9d9b73b93d858f302000000000000006855b52179c07a18f5ceb0c275be377bd83f71b81d571fec4211d779aff10904", 0x37) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x7, 0x100, 0x4, 0x2, 0xc, 0xd21f, 0xfff000000000000, 0xffff, 0x2, 0x3, 0x657, 0x1}) 15:30:50 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000001, 0x8, 0x1, 0x2, 0x0, 0x7, 0x1c512c9a, 0x905e}, &(0x7f0000000100)={0x6837, 0x2, 0x5, 0x3, 0x7fff, 0x894f, 0x1000, 0x3ff}, &(0x7f0000000140)={0x0, 0x3f, 0x3, 0x4bf, 0xc0d9, 0xffffffffffff0000, 0x9}, &(0x7f00000001c0)={r1, r2+30000000}, &(0x7f0000000240)={&(0x7f0000000200)={0x10000000}, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0xa088632d4cf84bfb, 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000280)) sync() openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pwritev(r3, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@remote, @local}, &(0x7f0000000080)=0xc) 15:30:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x2, @mcast1}}}, 0x90) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@local, @ipv4={[], [], @initdev={0xac, 0x1e, 0xcd0b, 0x0}}, @dev={0xfe, 0x80, [], 0xb}, 0x80000000, 0x1517, 0x38a6, 0x100, 0xd08, 0x80000000, r2}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000080)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x28000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x18) 15:30:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x2c) r0 = perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="020000000100000010000200000000002000090000000000000030d6c5fb470000000000"], 0x24, 0x1) chdir(&(0x7f0000000340)='./file0\x00') lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0xc8f) bpf$MAP_CREATE(0x2, &(0x7f0000000240)={0x0, 0x5, 0x77fffe, 0x0, 0x0, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 198.107441] binder: 7673:7679 ioctl c018620b 0 returned -14 [ 198.132043] binder: 7673:7679 ioctl c018620b 0 returned -14 [ 198.144032] binder: release 7673:7679 transaction 252 out, still active [ 198.156091] binder: undelivered TRANSACTION_COMPLETE 15:30:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fadvise64(r0, 0x0, 0x4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:30:50 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @rand_addr=0x3ff, 0x1, 0x8, [@broadcast, @local, @loopback, @rand_addr=0x5, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x4, @remote, @multicast2]}, 0x30) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 198.180484] binder: release 7673:7684 transaction 253 out, still active 15:30:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f31") r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x470, 0x118, 0x0, 0x0, 0x388, 0x388, 0x388, 0x4, &(0x7f0000000000), {[{{@arp={@rand_addr=0x4, @broadcast, 0xffffff00, 0x0, @mac=@link_local, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff]}, 0x1000, 0x0, 0x9, 0x4, 0x4, 0x0, 'bridge_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1ff}}}, {{@arp={@empty, @remote, 0x0, 0xff, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @mac=@dev={[], 0x17}, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, 0x8, 0x213, 0x7563, 0x100000000, 0x4, 0x1, 'bridge_slave_0\x00', 'bridge0\x00', {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xfc, 0x4, 0x36b}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x100000073) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) fsetxattr$security_smack_entry(r7, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) 15:30:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x2c) r0 = perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="020000000100000010000200000000002000090000000000000030d6c5fb470000000000"], 0x24, 0x1) chdir(&(0x7f0000000340)='./file0\x00') lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0xc8f) bpf$MAP_CREATE(0x2, &(0x7f0000000240)={0x0, 0x5, 0x77fffe, 0x0, 0x0, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 198.221960] binder: 7696:7699 ioctl c018620b 0 returned -14 [ 198.225320] binder: undelivered TRANSACTION_COMPLETE [ 198.255268] binder: 7696:7699 ioctl c018620b 0 returned -14 [ 198.262774] binder: release 7696:7699 transaction 254 out, still active [ 198.271385] binder: undelivered TRANSACTION_COMPLETE [ 198.277123] binder: release 7696:7704 transaction 255 out, still active [ 198.285220] binder: undelivered TRANSACTION_COMPLETE 15:30:51 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 198.739181] binder: BINDER_SET_CONTEXT_MGR already set [ 198.747735] binder: 7714:7717 ioctl 40046207 0 returned -16 [ 198.754720] binder: 7714:7717 ioctl c018620b 0 returned -14 [ 198.762185] binder: BINDER_SET_CONTEXT_MGR already set [ 198.767725] binder: 7714:7717 ioctl 40046207 0 returned -16 [ 198.775201] binder: 7714:7717 ioctl c018620b 0 returned -14 [ 198.775646] binder: release 7714:7717 transaction 256 out, still active [ 198.789047] binder: undelivered TRANSACTION_COMPLETE [ 198.803302] binder: release 7714:7719 transaction 257 out, still active [ 198.812558] binder: undelivered TRANSACTION_COMPLETE 15:30:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000e80)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0xfffffffffffffffc) keyctl$invalidate(0x15, r4) ppoll(&(0x7f0000000040)=[{r3}, {r1, 0x2}, {r2, 0x100}, {r1}, {0xffffffffffffffff, 0x8000}], 0x5, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001780)="04"}) 15:30:51 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:51 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000001, 0x8, 0x1, 0x2, 0x0, 0x7, 0x1c512c9a, 0x905e}, &(0x7f0000000100)={0x6837, 0x2, 0x5, 0x3, 0x7fff, 0x894f, 0x1000, 0x3ff}, &(0x7f0000000140)={0x0, 0x3f, 0x3, 0x4bf, 0xc0d9, 0xffffffffffff0000, 0x9}, &(0x7f00000001c0)={r1, r2+30000000}, &(0x7f0000000240)={&(0x7f0000000200)={0x10000000}, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0xa088632d4cf84bfb, 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000280)) sync() openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pwritev(r3, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:51 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x18) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0xfffffc56) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) pipe(&(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100c000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf250b0000006c00030008000800000000000800030004000000080007004e220000080007004e210000080001000200000008000800ff000000080007004e240000140002007465616d300000000002000000000000140002007465616d5f736c6176655f3100000000080008003f00000008000400020000003000020008000200bf0f0000000000000600000014000100ff02000000000000000000000000000108000600090000000800060001000000300001000800060073656400080006006c63000014000300fe8000000000000000000000000000bb0800080000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 15:30:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f0000000040)=""/5, &(0x7f0000000080)=0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:51 executing program 5: open(&(0x7f00000000c0)='./file0\x00', 0x40c4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7}, 0x7) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="83ec93a39ca751a3b6821c063b835bb637fdd14ca93c8060b70d148539e701f02d09aed724485e0c707f6ba4afb29c9bee28faa778c9cae7b5674aebcb02da163709f046f403dc554d1f1f28f6c85da009d00905c5e6eccda25f477f2329ee086270cff184a25b0e9cd1444ccdd3f7e011eaa926574149a7e93b5f5031017a72ce912dd4a30e6660ffa7ac151180f1963bb25e4cca4fbb20753d7e37a9b42b8adeb8e58fec9c88a33a79134b09d07a0028afd7e49e177f9c3643204038f2142587e2fc1f78170039"], 0xc5) sync_file_range(r0, 0x0, 0x0, 0x2) timer_create(0x6, &(0x7f0000001700)={0x0, 0x3d, 0x6, @thr={&(0x7f0000000480)="d0ab53750a911efb4981194d8603199caa328f2eefd7466efd0203868e83e15d8436828ed0331b334ee2e47538bb7c6b67a54a9121dc8ec5a90f8c0f855b09ab6962f83cd0f0ba9b0856f4de74dd46044c3e27736f74f806ea26526fed74279e617cf343a9c1452b575fa81aec32559af9e4697c10091d6fcdffdb8f7b59cc", 0x0}}, 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) [ 198.979395] binder: 7725:7731 ioctl c018620b 0 returned -14 15:30:51 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="ef13a418a5a17195855ae38c68c59c1af30de6c13d8f7ce887ccd48a473972524f685f3541f23cd12604be", 0x2b}, {&(0x7f0000001100)="04d66d8b5461f4dbbaab058cf23a165b", 0x10}, {&(0x7f0000001140)="b9f5d0c9fbae597d537e3f68c972d04c0bccce732b73a784eb6635e2e6a904a2d5bba1ea23dc03b955fd4e08aa163b6e6a105e916b3ad7a7c8b1fa4be8d002ead63beda86539", 0x46}, {&(0x7f00000011c0)="016a37f76ca222ec2195155df78ca1a414c561c564a5bbe1dcae97b5be20be71d1e56c8901e0bf1c67e2b23dc212a605f23ace583a05c47ca921711a79e9ad7a2fe3f5b3ec2cd78e", 0x48}, {&(0x7f0000001240)="15ec0d5b747a5f7dd8ef06c08e82818eea85c9fceb5384fb49b621a5a6c4bf61ceb5c152e4774871140cbfdd386ae5ff87d14a9705edac690cfab84da1fc81ddba1e713a8d97fb2ca53dafd1494fcc5260b816567f6e051ac246a55057d1221b284e5752e86f3ec00e6314892b9841864caa566c2a9632655096e8826adda98bb1f48305172bf01472e7796f138a411aad0e4f69b9f311578a9537f3aa30d1f812b85e98ed4193d594065f021b1453f49e0a6481dbc2234a8c10dfdd3d0802c6720b2b2534ab4348d69979", 0xcb}, {&(0x7f0000001340)="824912c0688d32b46d1e7b068710f4bb2fccd764cd396687", 0x18}], 0x7, 0x4) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 199.026448] binder: 7725:7731 ioctl c018620b 0 returned -14 [ 199.033760] binder: release 7725:7731 transaction 258 out, still active [ 199.046395] binder: undelivered TRANSACTION_COMPLETE 15:30:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000200000000424d4d0e119438ec0a450f4b430863f71ab4f2960d14c95dab341caff509d6bf96b0e92577ef509516f83dc231eb01bac1e48c8169e1e29494ba0e7fdd77e052b19d5994988941cff07b8bcc5dc2863650b822592548a696f002a7c79e0772b9d215a3ce1ce8b64e1060f1"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x10000, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000100)={0x6, {{0x2, 0x4e22, @loopback}}, 0x0, 0x1, [{{0x2, 0x4e23, @rand_addr=0x4}}]}, 0x110) 15:30:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 199.068027] binder: release 7725:7741 transaction 259 out, still active [ 199.105704] binder: undelivered TRANSACTION_COMPLETE [ 199.125787] binder: 7750:7751 ioctl c018620b 0 returned -14 [ 199.151120] binder: 7750:7751 ioctl c018620b 0 returned -14 [ 199.171307] binder: release 7750:7757 transaction 261 out, still active [ 199.188439] binder: undelivered TRANSACTION_COMPLETE [ 199.212241] binder: release 7750:7751 transaction 260 out, still active [ 199.235626] binder: undelivered TRANSACTION_COMPLETE 15:30:52 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:52 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000100)='o\x00', 0xffffffffffffffff}, 0x30) dup(r0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/113, 0xfffffffffffffead}], 0x1, 0x0) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x99) getsockopt$inet_mreqn(r0, 0x0, 0x20024, &(0x7f00000000c0)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x4e24, 0x2, 0x4e23, 0x8, 0xa, 0x80, 0x20, 0x6f, r2, r3}, {0x8, 0x8, 0x80000001, 0xffffffffffffffa1, 0x0, 0xc9a, 0x2, 0x5}, {0x1, 0x800, 0x0, 0x10000}, 0xfffffffeffffffff, 0x6e6bbd, 0x0, 0x0, 0x2, 0x4fd944462a4b1fc4}, {{@in=@rand_addr=0x87, 0x4d4, 0x7f}, 0xa, @in=@multicast2, 0x0, 0x6, 0x3, 0x9, 0x47c, 0x9, 0x1}}, 0xe8) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x4, 0xffffffffffffffe1, 0x0, 0x6}) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000"], 0x90) 15:30:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) [ 199.580337] binder: 7763:7768 ioctl c018620b 0 returned -14 [ 199.601430] binder: 7763:7768 ioctl c018620b 0 returned -14 [ 199.614054] binder: release 7763:7768 transaction 262 out, still active [ 199.627840] binder: undelivered TRANSACTION_COMPLETE [ 199.649080] binder: release 7763:7772 transaction 263 out, still active [ 199.676751] binder: undelivered TRANSACTION_COMPLETE 15:30:52 executing program 2: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') getrlimit(0xe, &(0x7f0000000040)) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0xd25d13e8cdf43229, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) renameat2(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 15:30:52 executing program 5: open(&(0x7f00000000c0)='./file0\x00', 0x40c4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7}, 0x7) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="83ec93a39ca751a3b6821c063b835bb637fdd14ca93c8060b70d148539e701f02d09aed724485e0c707f6ba4afb29c9bee28faa778c9cae7b5674aebcb02da163709f046f403dc554d1f1f28f6c85da009d00905c5e6eccda25f477f2329ee086270cff184a25b0e9cd1444ccdd3f7e011eaa926574149a7e93b5f5031017a72ce912dd4a30e6660ffa7ac151180f1963bb25e4cca4fbb20753d7e37a9b42b8adeb8e58fec9c88a33a79134b09d07a0028afd7e49e177f9c3643204038f2142587e2fc1f78170039"], 0xc5) sync_file_range(r0, 0x0, 0x0, 0x2) timer_create(0x6, &(0x7f0000001700)={0x0, 0x3d, 0x6, @thr={&(0x7f0000000480)="d0ab53750a911efb4981194d8603199caa328f2eefd7466efd0203868e83e15d8436828ed0331b334ee2e47538bb7c6b67a54a9121dc8ec5a90f8c0f855b09ab6962f83cd0f0ba9b0856f4de74dd46044c3e27736f74f806ea26526fed74279e617cf343a9c1452b575fa81aec32559af9e4697c10091d6fcdffdb8f7b59cc", 0x0}}, 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 15:30:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @empty}, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0xfffffffe, {{0xa, 0x0, 0x0, @loopback, 0x8001}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={r3, r4/1000+30000}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:52 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0x75, 0xc) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = fcntl$getown(r0, 0x9) getpriority(0x2, r1) 15:30:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x8000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @multicast1}, &(0x7f0000000280)=0xc) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000680)={@dev, @broadcast, 0x0}, &(0x7f00000006c0)=0xc) getsockname(r0, &(0x7f0000000840)=@hci={0x1f, 0x0}, &(0x7f00000008c0)=0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'ip6erspan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000940)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000a40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000b80)=0xe8) accept4$packet(r2, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000000c40)={0x11, 0x0, 0x0}, &(0x7f0000000c80)=0x14) accept4$packet(r2, &(0x7f0000000cc0)={0x11, 0x0, 0x0}, &(0x7f0000000d00)=0x14, 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d40)={0x0, @multicast2}, &(0x7f0000000d80)=0xc) clock_gettime(0x0, &(0x7f0000002340)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002200)=[{{&(0x7f0000000dc0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e40)=""/46, 0x2e}, {&(0x7f0000000e80)=""/119, 0x77}, {&(0x7f0000000f00)=""/148, 0x94}, {&(0x7f0000000fc0)=""/155, 0x9b}, {&(0x7f0000001080)=""/82, 0x52}, {&(0x7f0000001100)=""/239, 0xef}], 0x6, &(0x7f0000001280)=""/196, 0xc4}, 0x3}, {{&(0x7f0000001380)=@tipc=@name, 0x80, &(0x7f0000001680)=[{&(0x7f0000001400)=""/220, 0xdc}, {&(0x7f0000001500)=""/80, 0x50}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/89, 0x59}, {&(0x7f0000001640)=""/42, 0x2a}], 0x5, &(0x7f0000001700)=""/252, 0xfc}, 0x3}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)=""/62, 0x3e}], 0x1, &(0x7f0000001880)=""/225, 0xe1}, 0x8001}, {{&(0x7f0000001980)=@caif, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/193, 0xc1}, {&(0x7f0000001b40)=""/134, 0x86}, {&(0x7f0000001c00)=""/79, 0x4f}, {&(0x7f0000001c80)=""/243, 0xf3}, {&(0x7f0000001d80)=""/240, 0xf0}], 0x6, &(0x7f0000001f00)=""/115, 0x73}, 0x4}, {{&(0x7f0000001f80)=@generic, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002000)=""/186, 0xba}, {&(0x7f00000020c0)=""/230, 0xe6}], 0x2}}], 0x5, 0x10000, &(0x7f0000002380)={r17, r18+10000000}) getsockname$packet(r2, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002400)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002440)={@remote, @rand_addr, 0x0}, &(0x7f0000002480)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000024c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000025c0)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000002600)={@rand_addr, 0x0}, &(0x7f0000002640)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000002680)={@initdev, 0x0}, &(0x7f00000026c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002700)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000002800)=0xe8) accept4$packet(r2, &(0x7f00000029c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14, 0x800) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000002a40)={@remote, @multicast1, 0x0}, &(0x7f0000002a80)=0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000002ac0)={0x0, @broadcast}, &(0x7f0000002b00)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000002c00)={@rand_addr, 0x0}, &(0x7f0000002c40)=0x14) accept$packet(r2, &(0x7f0000002d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002d80)=0x14) recvmmsg(r0, &(0x7f0000005dc0)=[{{&(0x7f0000002dc0)=@isdn, 0x80, &(0x7f00000042c0)=[{&(0x7f0000002e40)}, {&(0x7f0000002e80)=""/192, 0xc0}, {&(0x7f0000002f40)=""/195, 0xc3}, {&(0x7f0000003040)=""/172, 0xac}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/31, 0x1f}, {&(0x7f0000004140)=""/120, 0x78}, {&(0x7f00000041c0)=""/107, 0x6b}, {&(0x7f0000004240)=""/115, 0x73}], 0x9}, 0x7fff}, {{&(0x7f0000004380)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004400)=""/193, 0xc1}], 0x1, &(0x7f0000004540)=""/122, 0x7a}, 0x92e}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000045c0)=""/38, 0x26}], 0x1, &(0x7f0000004640)=""/192, 0xc0}, 0x8605}, {{&(0x7f0000004700)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004780)=""/188, 0xbc}, {&(0x7f0000004840)=""/123, 0x7b}, {&(0x7f00000048c0)=""/172, 0xac}], 0x3, &(0x7f00000049c0)=""/24, 0x18}, 0x5}, {{&(0x7f0000004a00)=@ipx, 0x80, &(0x7f0000005a80)=[{&(0x7f0000004a80)=""/4096, 0x1000}], 0x1, &(0x7f0000005ac0)=""/59, 0x3b}, 0x80000000}, {{&(0x7f0000005b00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005b80)=""/198, 0xc6}], 0x1, &(0x7f0000005cc0)=""/236, 0xec}, 0xffffffffffff5c86}], 0x6, 0x1, &(0x7f0000005f40)={0x77359400}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005f80)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000006080)=0xe8) getpeername$packet(r2, &(0x7f0000006180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000061c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000008980)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000089c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000008ac0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000008b00)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000008c00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000008c40)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000008d40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000008d80)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000008e80)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000009900)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000009a00)=0xe8) getpeername$packet(r2, &(0x7f0000009a40)={0x11, 0x0, 0x0}, &(0x7f0000009a80)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000009ac0)={@ipv4, 0x0}, &(0x7f0000009b00)=0x14) getpeername$packet(r2, &(0x7f0000009b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009b80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f000000a780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40042100}, 0xc, &(0x7f000000a740)={&(0x7f0000009bc0)={0xb50, r4, 0x108, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x100, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r14}, {0x174, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x254, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r24}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfd4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x900000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r26}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r29}, {0x4}}, {{0x8, 0x1, r30}, {0x20c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r32}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r33}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}]}}, {{0x8, 0x1, r35}, {0x1f4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r36}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0xffffffffb203cd67, 0xfffffffffffffffa, 0x10}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6d1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}]}}, {{0x8, 0x1, r39}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r40}}, {0x8}}}]}}, {{0x8, 0x1, r41}, {0xac, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r42}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) [ 199.850705] binder: 7780:7784 ioctl c018620b 0 returned -14 [ 199.888555] binder: 7780:7784 ioctl c018620b 0 returned -14 15:30:52 executing program 2: futex(&(0x7f000000cffc), 0x109, 0x0, 0x0, 0x0, 0x2) setitimer(0x1, &(0x7f0000000040)={{0x0, 0x7530}, {0x77359400}}, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000000c0)={0x4, 0x1f, 0x8, 0x2, 0xffff, 0x7, 0x8}) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x2) 15:30:52 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RMKNOD(r0, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x3, 0x1}}, 0x14) prctl$PR_SET_MM(0x23, 0x9, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/235, 0xeb}], 0xa, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x4, 0x0, 0x9) [ 199.916325] binder: release 7780:7784 transaction 264 out, still active [ 199.929176] binder: undelivered TRANSACTION_COMPLETE [ 199.966355] binder: release 7780:7791 transaction 265 out, still active [ 199.994878] binder: undelivered TRANSACTION_COMPLETE [ 200.135506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7813 comm=syz-executor.4 15:30:53 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e24, @empty}}) 15:30:53 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000240)={0x2, 0x15a7, 0x2, 0xfffffffffffffffd}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', r2}) uname(&(0x7f0000000180)=""/149) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2000000088) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x200000000002, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x7, 0xb) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x6, &(0x7f0000000100)={0x77359400}) 15:30:53 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0xffffffff00000000, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0xfffffffffffffdd9, 0x1400}], 0x0, 0x0) 15:30:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x102) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x1) [ 200.306801] binder: 7818:7823 ioctl c0306201 0 returned -14 [ 200.320737] binder: 7818:7827 ioctl c0306201 0 returned -14 15:30:53 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x0, [], [{0x16c4c35d, 0x8, 0xbbd, 0x1f, 0xc52, 0xfb}, {0x4, 0x9, 0x6, 0x4, 0x100000001, 0x1}], [[], [], [], [], [], [], [], [], [], []]}) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 200.358864] binder: 7829:7832 ioctl c018620b 0 returned -14 [ 200.386528] binder: 7829:7832 ioctl c018620b 0 returned -14 [ 200.390952] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.399928] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 15:30:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) fallocate(r0, 0x20, 0x9, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xfffffffffffffffb, 0x3ff, 0xb6, 0x80000000, 0xe}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 200.401235] binder: release 7829:7838 transaction 267 out, still active [ 200.425976] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.428302] binder: undelivered TRANSACTION_COMPLETE [ 200.446384] binder: release 7829:7832 transaction 266 out, still active [ 200.453382] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 200.462760] binder: undelivered TRANSACTION_COMPLETE [ 200.464820] binder: 7842:7844 ioctl c018620b 0 returned -14 [ 200.480856] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.488336] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 200.496079] binder: 7842:7844 ioctl 801c581f 20000000 returned -22 [ 200.503283] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.511417] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 200.519237] binder: 7842:7844 ioctl c018620b 0 returned -14 [ 200.525918] binder: 7842:7847 ioctl 801c581f 20000000 returned -22 [ 200.534476] binder: release 7842:7844 transaction 269 out, still active [ 200.544942] binder: undelivered TRANSACTION_COMPLETE 15:30:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 200.558484] binder: release 7842:7844 transaction 268 out, still active [ 200.567546] binder: undelivered TRANSACTION_COMPLETE [ 200.611959] binder: 7852:7854 ioctl c018620b 0 returned -14 [ 200.625592] binder: 7852:7854 ioctl c018620b 0 returned -14 [ 200.635747] binder: release 7852:7854 transaction 270 out, still active [ 200.646968] binder: undelivered TRANSACTION_COMPLETE 15:30:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = dup(r0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000005000100000000000000f2ff000000000100000000000000000000000000000000000000000000000000040000000000000000000000c386f4c7e05c660b83830000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) 15:30:53 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) 15:30:53 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x40006011, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x422000, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'nr0\x00', @link_local}) madvise(&(0x7f00001c1000/0x1000)=nil, 0x1000, 0xb) clone(0x3, 0x0, 0x0, 0x0, 0x0) [ 200.861306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7863 comm=syz-executor.4 15:30:53 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) uname(&(0x7f0000000000)=""/199) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:30:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000804, 0x80) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x45a, {{0xa, 0x0, 0x3, @empty}}}, 0x2f7) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:53 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x480080, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/35, 0x23) 15:30:53 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) 15:30:53 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f00002d6000/0x1000)=nil) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0xc) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 201.138936] binder: 7881:7884 ioctl c018620b 0 returned -14 [ 201.145910] binder: 7881:7884 ioctl c018620b 0 returned -14 [ 201.153036] binder: release 7881:7884 transaction 271 out, still active [ 201.169498] binder: undelivered TRANSACTION_COMPLETE 15:30:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0600008000000010"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 15:30:53 executing program 5: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) ftruncate(r0, 0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x4, 0x2, 0x64, 0x7, 0x0, 0x9, 0x81048, 0x5, 0xfffffffffffffffc, 0x20, 0x1f, 0x93d9, 0x7e04, 0x0, 0x3, 0x9, 0x8001, 0xffff, 0x6, 0x61bb, 0x5, 0x9, 0xfffffffffffffff7, 0x9, 0x2, 0x5, 0x7fffffff, 0x7, 0x4, 0x570, 0x7, 0xffffffffffffff80, 0x6, 0x101, 0x9, 0xff, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000040)}, 0x200, 0xffff, 0x83, 0x3, 0x7, 0x9, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xa9) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x81, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000200)='./file0\x00', 0x200000003, 0x0) [ 201.193547] binder: release 7881:7889 transaction 272 out, still active [ 201.233742] binder: undelivered TRANSACTION_COMPLETE 15:30:53 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 201.248282] binder: 7900:7904 ioctl c018620b 0 returned -14 [ 201.277609] binder: 7900:7904 ioctl c018620b 0 returned -14 [ 201.289829] binder: release 7900:7904 transaction 273 out, still active 15:30:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001700)='/dev/binder#\x00', 0x0, 0x2) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="949b439000fabeec87982dfac77e2ee3149ce22a04ab55400ce57c1c86b1fe4a8d8f1264eb3482daecfe", 0x2a}, {&(0x7f0000001680)="bfbdc888d34e3fe2816f6ccc5e6f597db1ea7425ea9f929fc0df5f1931a5e5bc7785ed18448d9e13fb5971942bf389836a99986cf23fa855e79d74825f2b435083480361aee8c437f08130ac5a46968a7b8b18ae139f6feef5b93d6ca775bfd78282cfc46ee6", 0x66}, {&(0x7f0000001540)="3a436fa8f15a8e0469aa4805cfb6b6c9e806b11f6b5f3f39459e357656b0e990f921f33b6bc91aac6a43ce742738f61c9462d26314f847eff1d306a46754b03db359a38a0b52dfc81e288cf70c6d8138ba241047933fa3a4df684a3b1553de1419fcd92842e7a39fef73", 0x15}, {&(0x7f00000015c0)="848693f8709151460f6281df61924ab93f115bb74a95c7e3ab0b674e09cad6a93d6f3cdfcc41ea1a247414bb72ecd6b71e6bf68f4391fac8675793765ca67ac58bd1f7fbe38055743f341dfc494598f5cc8bdfadd50cda0c7ae839a85d9843e92a5a4c0b2e93679d5f19458e6e41c14dc34c106ac11685116f277fe6f7f0f13cb899439d", 0x84}], 0x4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000001e40)="270112f0e138965c3ff8a3ec67997cbebbb26de37fa1826216d3f943d09a33db612e99bd1f4f02fd76d174207a6c77e0e4903200e290e6b82149133368482a0099ee52b56b6944012283e0beeccefec53e8c8de64bd255b1ac055878f3b9389d63eccc97794f7b8064ccdc1526644b3efa1d522215fa63204557f958872492b1a5c930fe2bbbacb9a503f0deca20b1b84b4ddfbd1476add8c69bdc6cc6a6dc59ef3ed4ce07e8d5a50a5ad09e5f0d56df608ebe051708ae5689e6571d8ff3b0e35d2e6619be0b662986b073377c54ff5154c440cf278c5655", 0xd8}, {&(0x7f0000001f40)="68ec8cedd9c37cc95584b58dccd4a06148135329cae6bb9f2a0fc4264e3e004493b1a325d54414a2cd4121c29645b273f25ec9f6708afff83ed6f3d0a1cff3a37a364e7db295e28b737931d85ba740d68c57ca8267844f4463ef4d4415bea1432e34cb40cc6e48c49396", 0x6a}, {&(0x7f0000000140)="383617142fc3ef4c59bd7c9d4a5cd05382d5d504aa886c2e4fff7678744e30805ef2b04401addeef720fb0e5f1486b663374e15a616e1c12a3bbc7978de942134956b7f80b37de03", 0x48}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000240)="a754ebed218ccddb7a944bbc10d482bdb59beccc433acc3e56e50e9e21b4f1a325d165af16bda7acd003a42746382713d66d3f26e3da59912b6d8f544c6a1eddfc56678fda07eadda1b0d88133e56e56b4b71ca08ffd2878a7150bd31dd6fb6e060789b39d45611c596080eafe77ba76dca95bf211f7fd4761fcf3fe2bb03222c285aa66fa5f", 0x86}], 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001880)='/dev/full\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x110, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5b4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x24}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x203}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x110}}, 0x8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') vmsplice(r0, &(0x7f0000001dc0)=[{&(0x7f0000001480)="8f73c6f181fe5994397628e79b45d67f4f48ec78d999e0593e7cb982cfa22b8accf80117ace885d8c9d951647ada680c795fd187de40668b8b68f1b9b3f3998e0edb9cb5a27578af6a727660c54d5574", 0x50}, {&(0x7f0000001740)="13e57a04bfbb057496acbaac642d24da0ceef0b25f3d49e6d35cfc56b6cbc19d53411de44c9066d9c53b2616ea143aeb61ad473282c7e20e1c5c2c25a37e6ddb90ae4457bf56562dfa7702ffdbdb9ec83a51", 0x52}, {&(0x7f00000017c0)="fc51e5e03b4720e793a4b8dd2bb47dcf022e34f838cb8a7cf2b573912f87137c5088dbaa0ba541eeea90c9021634ec30be184dcbe8a9ae64a2fe44e4493c60a89d727d9019f24a8ad5f59b897e79689c7d8fba2f695d82eed9fd982b8eade31c4cee", 0x62}, {&(0x7f0000001500)}, {&(0x7f0000001b00)="42cc2b60351e44f8d18771a3918064af461a1698b483cd3e1c614e1f8748690e1aeb6be1ae2dafed65693dcb782597fe42a0ba551922bdb7fabba8d3b5a2d42390c86c19dd8a54a841c792301e9689fef1f50833b6d2120bb9665394f27319bf91b667884f57129a5614bf57902170e5d19dd5f5b21b88e1de0be087c094be9ad5df4c67b86a763a2f0dfbf22e022322be9a36c1339c9c483ba614f6d4d68bbc61375004930d32d2f5efe5c30d651bd41864ad1b9c67fe506924c57ba6d8a4af13764ea1c7d826b3a3c945185c48a42a45f5ab15e9443afc4e560e7069313a93edcbf50c2e1670cee2714676a737af44", 0xf0}, {&(0x7f0000001c00)="703a0c907cac01b3cb47f87a7f42fe3690fb7903a390a0661cbd4819ed2e73eb6569e588e80668521e08b08b6d279e84a52250473241c441980c7ad9747f491dd91bb743a1487b8d0cdf253d48d3211dfe761fe89a35ab3c6bfeb5f3639756b9ed18371e8d1e69ae2e76f515d946dd6ee2cc962c508872e822361dfde5b892cd1371d430db74a8793931f82de944a325b43618a7144acfc4937a5922cc767295efdd3019e0ada56ec14084768e4611ad1c3b385b584eaf3cc1b1813ab8e13b443ef5466d701bdcc242bf641ce795b6b7ee3881b48eb743ea00a2bcc2b8e9ffd7fbe8fa", 0xe3}, {&(0x7f0000001d00)="b2e6a14482ec22972086595a400491537b518673690c1532b505468bc2786d20c75181bdc71e42e8be200e25b8db92aae1f9ec97d2746c35b69066170ef6542b6b4a72c2ff37037df775019a5616470154333bc8b7142e6c6c83cee183f8e4a4bf545a8a5605ae6a1ad39b538453c13003abf669611416466b4cacab5a3b358823843c1521a6352fc2b7ee0b5c2fef15900d3fafdaa4", 0x96}], 0x7, 0xe) 15:30:54 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001240)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8ca4000000000000000004eae5cc57594"], 0x190) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r2, 0x3, 0x0) write$P9_RLOCK(r4, &(0x7f0000000300)={0x8}, 0x8) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000014c0)={@dev={0xac, 0x14, 0x14, 0x23}, @multicast2}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0adc1f1c3c12a41d88b070") read(r1, &(0x7f0000000200)=""/250, 0x50c7e511) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='dax\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) socket$inet(0x2, 0x1, 0x0) r6 = openat$keychord(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0x0, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200000, 0x0) io_setup(0x7e, &(0x7f0000000240)) 15:30:54 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r5, 0x404, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xd728302}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x40) fallocate(r4, 0x40, 0x0, 0x4) [ 201.301986] binder: undelivered TRANSACTION_COMPLETE [ 201.366463] binder: 7916:7921 ioctl c018620b 0 returned -14 [ 201.429657] binder: 7916:7929 ioctl c018620b 0 returned -14 [ 201.463200] binder: release 7916:7929 transaction 275 out, still active [ 201.486073] binder: undelivered TRANSACTION_COMPLETE [ 201.517490] binder: release 7916:7921 transaction 274 out, still active [ 201.556719] binder: undelivered TRANSACTION_COMPLETE 15:30:54 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:54 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:54 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}, @clear_death={0x400c630f, 0x4, 0x3}, @acquire={0x40046305, 0x2}], 0x1000, 0x0, &(0x7f0000000480)="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"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000240)={0x9, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x1000000000000000) ioctl$TIOCNXCL(r3, 0x540d) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000001480)="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"}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 201.946419] binder: 7937:7944 BC_FREE_BUFFER u0000000000000000 no match [ 201.977806] binder: 7937:7944 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 202.003688] binder: 7937:7948 ioctl c018620b 0 returned -14 [ 202.013981] binder: 7937:7944 Acquire 1 refcount change on invalid ref 2 ret -22 15:30:54 executing program 2: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) getsockname$packet(r0, 0x0, &(0x7f00000015c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001740)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001700)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x4) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x40, 0x7, &(0x7f0000001480)=[{&(0x7f00000000c0)="02c40e715f2fd642938a887360562ab639319181edacfe95c8a29d12db5312e6e76b3da3dd58fea2586c0866c19d992ee0a34e1389f18afd661b3ffde03f57fab46d6a047ea9e71891014653b412ea52e1b41bb99bb748834dbe9eb251d47b204f9eae31ef9d7b66917fc4e2324c2fc2767707aab8e78ed6bc752d70a06c85414e16c13afdf910576813a6599703e830fc2b097af6e18ebb16cb3d56b878747bbf1cd82afd8b9e", 0xa7, 0x78}, {&(0x7f0000000180)="ebf7941144e65461a8a7165e07beb35cb4ea747818f1a534a1f6114c7d009fb9002cc7df1ac3a22177dca7abff8ce3447a3d63ab53f8a7ff3b583d9a0c1c75fbc991c4c05f0ef0e57bc54779dfd389694f9ff7f0af657405f4cb6549a6e9032de3e2d986985ff041", 0x68, 0x7}, {&(0x7f0000000200)="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", 0x1000, 0x6}, {&(0x7f0000001200)="9050e4212eddbfccee6f28ab14806a3c4593e015d0406639c077c10ab7491810777cf6353ee7954151376329f25d32814853cff348e431d11d781d6cdfa19b4ff9275163aaa0c362a17e85d657484ed48ab0d77ae87436f56d00d17979839ae77a73586960779475c1a8277a595930e87cfad01220755959ea2a2a78efa6682ab5e9ff8a2810bd9b29d18f577dd83d87a832903487dfe736b46a9bbafa3a9dd424d43324245d68f320c2706bd328e7607ef1c2224ab09240d5270d2e27b008ca482dcf6924b023d41ffb0703dcdea781953ae03f6bd5b3", 0xd7, 0x3ff}, {&(0x7f0000001300)="fc682ca8af32bfccee45d93f9c1045b4cb0083601cd5ee7f2dff43849c1661c33d25c9cfd5834a96d810483778a6b33f493e67b362272dfbb5cdb2bef0fd63daaa74dba0441c04464d29cee2956fadc69cbce914c03973a735d2a8294dc4f9eaafc90b1a3462f081d5088ae619af28c19fe1e1268860da3f57e2377653896d25f287294c604f5cd07cf96f8fad27f5f2af6fe7fa844641bc6c79c5d7e3bf532e24c5d530ecf5c1", 0xa7, 0xfffffffffffffff7}, {&(0x7f00000013c0)="158ec0d6a74d6bddd1a79a26483fddf7e688e8d056c24f7cd12ba7b197a9ff6c96203093c6f39e754d449fcadbcf508e5d18abb7f727f1e626f747160a1ca3009bec5f357e4aec2856a5dfdfb2609a9a5036e00c9ba152d9f09ffca0f7780083cbdc8de758bc3e7a13c0b7793bff0036989aea062687ddf086017e5c107668", 0x7f, 0xac}, {&(0x7f0000001440)="997f70c7d30a1dc3094f91ed0d9e7606242ae38212c379cf87f36c6a856aa7", 0x1f, 0x211}], 0x220400, &(0x7f0000001540)={[{@nodots='nodots'}, {@dots='dots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@fat=@errors_continue='errors=continue'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}], [{@dont_appraise='dont_appraise'}]}) r2 = fcntl$getown(r0, 0x9) ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000016c0)={&(0x7f0000001600)="25e2198793f4d0a3b83515419c81f3b81d151ec7de71dacfe20ae3dc783ce024814710ce7f4f2d707e918db181976063b9cbf845ead2fc202a1b43e6e70a7999f33e871436f66b19243500390b57e8bed76d804bd05021bf05b084cdb584ebe95d8e0788512734375c8b9d214283c614947b89888e5a3ab79b3215d4a89f0fb10cb524329ad530234d63e760b4895d0d51d71a1dc6ae0eac83c07f33a6ef1afc2b9222003e", 0xa5}) 15:30:54 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:54 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:54 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl(r0, 0x5, &(0x7f0000000200)="3e57d20d873d72fce3a92b1e644e4791a34238513567328da6b0279f11c59ae2e1") preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) sync() pwritev(r1, &(0x7f0000000240)=[{0x0, 0x21f}, {0x0, 0x237}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r1 = geteuid() geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) setreuid(r2, r1) openat$pfkey(0xffffffffffffff9c, 0x0, 0x2000000000022340, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d6f64653d3030303030303030303030303030303030c5cc403030303030362c6d6f64433d30303030303030307008000000000000303030303030302c6d6f64653d30303030303030303030303030303030303030303336"]) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240), 0x4) io_setup(0x3, &(0x7f00000002c0)=0x0) io_getevents(r4, 0x6f, 0x3, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000380)={0x77359400}) [ 202.072404] binder: 7937:7948 BC_FREE_BUFFER u0000000000000000 no match [ 202.085663] binder: 7937:7948 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 202.096859] binder: 7937:7948 Acquire 1 refcount change on invalid ref 2 ret -22 15:30:54 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 202.119002] binder: 7937:7944 ioctl c018620b 0 returned -14 [ 202.140679] binder: release 7937:7944 transaction 277 out, still active [ 202.162886] binder: undelivered TRANSACTION_COMPLETE [ 202.188088] binder: release 7937:7944 transaction 276 out, still active [ 202.209501] binder: undelivered TRANSACTION_COMPLETE 15:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x8, @remote}}, 0x0, 0x155}, 0x90) 15:30:55 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) dup3(r1, r0, 0x80000) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:55 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffeaa, &(0x7f0000000000), 0x387, 0x0, 0xffffff00}, 0x800) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x345000) 15:30:55 executing program 5: r0 = socket(0x5, 0x200000802, 0x3) write(r0, &(0x7f0000000140)="240000001a0001f00080000400ede80e0af6f92c781b010600f2ffcb0800190005d70000", 0x24) 15:30:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:30:55 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:55 executing program 2: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=0x6e) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f0000000100)='\xc8\xe4:y\xb1\\\x90\\\xa3\xc8=y\x1f\xb0\xbb\xdf\xc7m\xe0-\x88\xb0\'G\xe3\x05\xf7\xd1R\xa7\x97\xb8\x8e\xe3\x15\xbb\x8a\x8f\x1a\xeb\xab\xa9\xf6\xf1%\xa9\xae\x85\xcf\xa0\xec\xbc', 0x2000000000) write(r3, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) 15:30:55 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 202.592983] binder: 7981:7984 ioctl c018620b 0 returned -14 [ 202.620637] binder: 7981:7984 ioctl c018620b 0 returned -14 15:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 15:30:55 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40003, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x15, 0x2, 0x0, 0xff}) 15:30:55 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 202.639412] binder: release 7981:7984 transaction 278 out, still active [ 202.657063] audit: type=1400 audit(1553614255.359:51): avc: denied { mounton } for pid=7992 comm="syz-executor.2" path="/proc/7992/attr/exec" dev="proc" ino=20907 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 15:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0xb999, {{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, {{0xa, 0x4e20, 0x2, @empty, 0x9}}}, 0x108) r4 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e21, 0x0, 0x4e21, 0x7ff, 0x2, 0x20, 0xa0, 0x3f, r3, r4}, {0xffffffffffffff81, 0x80000000000000, 0x4, 0x5, 0x4, 0x0, 0x80000000, 0x10000}, {0x800, 0xff, 0x2, 0x1}, 0x9, 0x6e6bbc, 0x1, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x4d5, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3500, 0x3, 0x3, 0x2, 0x5, 0x8, 0x2f5363bf}}, 0xe8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013000000002100000000000000000000000000000000000000"], 0x90) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) 15:30:55 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 202.698718] binder: undelivered TRANSACTION_COMPLETE 15:30:55 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') clone(0x200, &(0x7f00000000c0)="0c85acf060cc38884d93f2dd274d", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="56a3e628b6f2ad313926ea054d47e2742ccf615df484a28175d42b93beee4a6c785f6544e8ded5c0ad2df5e10bec729f2a278637265b68e1ca14936d84ef295da49b186e43f8c796cb6ad6b9433d4a3a13d0bc6bcdd72882cf51286041825189fdcd9fc633fe61c39ce96acaa8526f658f9902400df1a3fb631ec74755b43c34e6a3707094c698d2c2") preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x80000000, 0x1000, 0x5949, 0xfde, 0x3, 0x6, 0x9, 0x35b, 0x38, 0x33, 0x8, 0x1f, 0x20, 0x1, 0x3f, 0xffff, 0x1f}, [{0x7, 0x5, 0x100000000000000, 0x4, 0x7ff, 0x7ff, 0x9, 0x100000000}, {0x2, 0x0, 0x34, 0x9, 0x9, 0x3, 0xffff, 0xfff}], "1c4e24b756f37c", [[], []]}, 0x27f) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) 15:30:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4010, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8000000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x1000002ac) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x20000002) 15:30:55 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 202.737781] binder: release 7981:7999 transaction 279 out, still active [ 202.777210] binder: undelivered TRANSACTION_COMPLETE 15:30:55 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 202.785521] binder: 8019:8025 ioctl c018620b 0 returned -14 15:30:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x20}, {r0}, {r0, 0x500}, {r0, 0x8420}, {r0, 0x10}, {r0, 0x1000}, {r0}, {r0, 0x86aa08612fe3a90a}], 0x9, &(0x7f0000000080), &(0x7f00000000c0)={0x101}, 0x8) [ 202.822695] binder: 8019:8025 ioctl c018620b 0 returned -14 [ 202.823133] binder: release 8019:8025 transaction 280 out, still active [ 202.854806] binder: undelivered TRANSACTION_COMPLETE 15:30:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x3) recvfrom$inet6(r0, &(0x7f0000000180)=""/67, 0x43, 0x40000020, &(0x7f0000000200)={0xa, 0x4e24, 0xc83, @empty, 0x7ff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x10e) epoll_create1(0x80000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mkdirat$cgroup(r1, &(0x7f0000000080)='\x00\x00\x00\x80\x00', 0x1ff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @broadcast}, &(0x7f0000000280)=0xc) sync() getdents64(r0, &(0x7f0000000440)=""/174, 0xae) rt_sigsuspend(&(0x7f00000002c0)={0x3fc}, 0x8) accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800) 15:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000040)=""/196, &(0x7f0000000140)=0xc4) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010080000000000000000000000001000000000000000000000000000000000000000000007dcf7adb50ad700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000380)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 202.913467] binder: 8038:8044 ioctl c018620b 0 returned -14 [ 202.938038] binder: 8038:8044 ioctl c018620b 0 returned -14 [ 202.955004] binder: release 8038:8044 transaction 281 out, still active 15:30:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) dup(r0) 15:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) prctl$PR_GET_SECCOMP(0x15) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x1f) socket$inet6(0xa, 0x2, 0x6) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 203.000151] binder: undelivered TRANSACTION_COMPLETE [ 203.005971] binder: release 8038:8049 transaction 282 out, still active [ 203.022388] binder: 8057:8058 ioctl c018620b 0 returned -14 [ 203.041289] binder: undelivered TRANSACTION_COMPLETE 15:30:55 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) r3 = gettid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000e40)=0xc) sendmmsg$unix(r2, &(0x7f0000000f00)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="e64d1a07e0e0af84052d06796391cb39d883f1be4adf344ebe5a2bcdf1c9549abe6a0ad3c423d665af982363054dc4068e86fc8393815966edaca9af7de70affef1e62c22fc0025e9c266b71019d3121c18d6bbb0e67eb9052a9775542862bb478470a28a36f964f878b1158f07f11019e119058e1e811f1d01ddf3ae5df521ca9a4be0bfdbf629b099b98d2201cf719eb46132dd5d4c11b5ba0367f8760acb90909d8560ed03963a5f86dc21017a33531044d714c9d14763e9b71f5938ef5ffb230bc67b3a3a080e4f82a09113b2e987350d3b13c61074e7653", 0xda}, {&(0x7f0000000240)="d911467c001a5850efd0de52502e64e7ed2d498aca947929c5d6e07de71a7c8bfc3f017d2502b19ae521060ede341d28c2f56ce5edc1246bab6bd4aa1c169662d8dde547ae57309a07e1569a96f8b2c18c274aeabff5e2193f1b3403a52aa7a019a9e8748d71f6d365979a882b047bbc04247dfcd3c88de1930e49ef4068a4c2370563ae673e", 0x86}, {&(0x7f0000000300)="2d85733302a925986f2f1bb0d47d7804a1e4f1c7fe4b0a49753b36864019ed", 0x1f}, {&(0x7f0000000340)="bd2e4255a94bb800b9d4e4d071d02357c81200064b7086bc185197dd3be15a6e0cbb6d6f08d5f49e97305725471a50c2b949de967902c4d56e58ef52bf948088a20efccee918317774865b5025a2ee0cf8435d6ef1ef11ef46a146b4bd29d3a7799ed9bc60e141f311919387dd3f192e82ee689da7e0b5", 0x77}, {&(0x7f00000003c0)="a14dbd671011f34da3864a6224c2d1cf4e63f31d37ab04db7dfb512723b909ce578ccdbe1bd064441f56a3537cd84865769e854e44153d3e0768468725f90dc33f262e73c7ce388620d1fb68dbc2c727e05058b98a765a52c729e370de0bcb16daa86e91171477f5b9cc358e70dde7a02688728f6eecdf9e01f47279322e99258398a04f6a507c152b0398cf5003c23209d39b46940b2466ddc03cb44ba81e1c971391742ec07d348402a47c914849830da6442672ac188311b0f533896de6a258fa95dd6ad74ecba2ce158a0362e7ffb0d03bd08551a68248e2ae3b34da1c33915810883ef7a891157e8be808fc3559ce1c887f45", 0xf5}, {&(0x7f0000000580)="1d611d0d9b4afceae7a25816a3be26f0b078b44b15e7c86266edebd1de4eac644237144061d6f28d370207939d1ba32ee48f3780c0970add8094edd40d9124e97da62fb59af8d962bec68e562c97656ba2ef5674d1afc4a13c68eb055345b65203accd3b6a59e8cad87b367ac098548f6ff0ebd9ddc3f88d3a4654d965c2308d8c1ba41373b88c3ed0c09053e50883d751c28199c41ced8f079cd8bb836df5a7bccb1d41b7c5913329dd3932e11c3629", 0xb0}, {&(0x7f0000000640)="6132477be6a979a79fbe1d01e6d94739a9e040af881668c672abe5e01a2c36486463a41dbb1fd0ff36c15c9f4c16ad188bc539e827199dfe5948427fe9d7f22d673beeaf0003032834df070aa89761ef12a4214dcd370afee2ed51eab51f253712ab327a53102ebda8d95d080586297b7921843fb7b525826b5a815ca9332c4f45b7d65d4ede5ca4f59f965e019dd67e486f063850913dbec07b862ffea5de8870a8ab8a6cea9b06a785af85ce094acf0b38e6a465eff9d0fc16479359d94e0ef2fe3b29", 0xc4}, {&(0x7f0000000740)="986d26c574d28bc1170e93e792501908056faaca0650e32f6f20ecbc1d03dd560fd56923478b409749a793d1df2cb636109f8abbf31678b834f9047fec72848297c3a93b6efe52c60ba26cfe5d568f180abfb43513bab20fd5aa87c8e0d51189f7345e8b84e10f9eaf7a93fdcaa053bf1f69873e71cb4fae7c698e886cf2fbb4e492646da95da913a7780f5a0a4614947757f45d3b8fab3cde805aeea55a737b31708f05d5fb651459c07f92d4d34ea50c27802728aad39bb47fdb0884ef88f0f607bd0003a58be1688320", 0xcb}], 0x8, &(0x7f0000000840)}, {&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000900)="efc3374d", 0x4}, {&(0x7f0000000940)="23baa595710f42b2a966aba03646be95e5f300480b53dacbaf4ac3abd590ed8e6fc9f0c96038355f3689c9f45861c241d8a69dc412e407dc1201ceb384f612e50a19c51edcca6bad3c6cce8ee97a960b1a5657731c95a23b64e5400ef7c246f49e52ed49c5edbafc585cfdcbdeee3da0e866658b979de4f17081e5c29fd6572249621407b196a2dcdd3de162d5a391387497808cd13d2c7ba3d67ce62e966df0332e20bc95cf35e7c5af9b968cf76e75dabf8b40b4c0bb343675f54415d6e4e5bfc00976bcc239eddd566f200131ae79bc659d4df4a44ddbcd8320733f57ec2679b8c4309d8d874a3f4a3c", 0xeb}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000a40)="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", 0xfc}, {&(0x7f0000000b40)="3dadfc401cc8a188562e401a15db538f002c32de338a764acec5c9b7626fe813caeb3feba649f65b7ae7f33c006b66733d776a398b82736d330328696383ca1a9b60b17f00804bb86ee97c004dfb9281", 0x50}, {&(0x7f0000000bc0)="8ae3a643b852ba44b8b8a5a5360c6716d9b1fb94bd42db5a24cab08944d5aeeb90975717a8913ff6ec2deff93ef5c7b7feaf57090ee944c22ebfa45e23a213c3", 0x40}, {&(0x7f0000000c00)="f57fdeae88c45f62b154f31b276c9c43e7c7c113c2005ea083c967b76625930a2db329685cfecb1f48010dc7a8aadb65d6e968b2811b4269cc5202c850d847e88d7b202b6ee982bab0a9d9b2e5f9c7c6dee75ecc", 0x54}, {&(0x7f0000000c80)="23a4dd5b166048bf3c966fb81eb2976f7a4ed5765a687d0ebad2c2e99048795d6b6e8ee4b71f6f", 0x27}], 0x8, &(0x7f0000000e80)=[@rights={0x38, 0x1, 0x1, [r1, r1, r1, r2, r2, r0, r0, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x58, 0x40}], 0x2, 0x40000) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 203.046722] binder: 8057:8058 ioctl c018620b 0 returned -14 15:30:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 203.090748] binder: release 8057:8062 transaction 284 out, still active [ 203.103277] binder: undelivered TRANSACTION_COMPLETE [ 203.123048] binder: release 8057:8058 transaction 283 out, still active [ 203.135252] binder: 8069:8071 ioctl c018620b 0 returned -14 15:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000003f00ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008600000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0xb) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x2, 0x3700, 0x3f, 0xf46, 0xfff}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 203.154044] binder: undelivered TRANSACTION_COMPLETE [ 203.159439] binder: 8069:8071 ioctl c018620b 0 returned -14 [ 203.173043] binder: release 8069:8071 transaction 285 out, still active [ 203.196599] binder: undelivered TRANSACTION_COMPLETE [ 203.213599] binder: release 8069:8076 transaction 286 out, still active [ 203.236880] binder: undelivered TRANSACTION_COMPLETE 15:30:56 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x9, 0x2, 0x7, 0xff}, {0x3, 0x2, 0xfff, 0x1}, {0x9, 0x4f5, 0x7, 0x6}]}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffdf6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10630840040000000000000011634840030000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="000000000000000003000000000000003100000000000000852a747001000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="000000000000000002000000000000002000000000000000852a687300010000", @ANYRES64=r1, @ANYBLOB="0300000000000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="060000000000000005630440020000000e630c400200000002000000000000000e630c400200f9ffffff000000000000076304400200000007630440040000007670627f4f730968b915e61bd7e8692fc1c5190610f48b1b5538dc89a5978ce8d27dc49f5b3cef93e4d6baa41d2e7a"], 0x0, 0x0, 0x0}) 15:30:56 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fcntl$setflags(r0, 0x2, 0x1) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x800000002}, 0x7) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) [ 203.650970] binder: 8088:8091 ioctl c018620b 0 returned -14 [ 203.665502] binder: 8088:8091 ioctl 6611 0 returned -22 [ 203.672973] binder: 8088:8091 ioctl c018620b 0 returned -14 [ 203.684768] binder: 8088:8091 ioctl 6611 0 returned -22 15:30:56 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:56 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x80000, 0x6) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0xc185b21d5dd6e981, 0x4) 15:30:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:56 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x247e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000180)) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff9100170081003100001c04fc52d808b89dfb3ee9198a9fcf24e924819e412f1a4c70cfb07eb4724693a2665335244bb78c966f8ec0af979da9c7086bb4ef308c38345f587e976067eccd2d6993d9672ae109f3b8acea8be1f7f84da002921c8b43d893beaf65ae2bb278"], &(0x7f0000000140)={0x0, 0x1, [0xaf0, 0x60c, 0x9af, 0xc0d]}) 15:30:56 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f00000000c0)=0x1c, 0x80800) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000a08080000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050624f8d01ba5f6d05d28e0985129f7955a34983f2fdd2af686b1656fd939383ae3e4f703d8ea8417465fafbdb56e7f654ed9b93f9762ebd2f500c69067367c4c97d000000"], 0x90) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000200)="5767dfb7f161578b7bcc267f9f2207ab81a3796ecb339275c5dbcdd711021755e9db1a2e98e69c020071cc24fbdf74a515d6f9852146aa9fcd8e2603071de96031147ab878230218d5113ad45c1643583ea8b3fc969801749688ba183bf48abcf0dd707a10fd490bfb86965674daf67ab5c543099b", 0x75}], 0x1, 0x8) 15:30:56 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000040)={0x54, {{0xa, 0x4e24, 0x7, @empty, 0x400}}, {{0xa, 0x4e23, 0x4, @ipv4, 0x80000001}}}, 0x108) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 203.810827] binder: 8104:8107 ioctl c018620b 0 returned -14 15:30:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x20}, {r0}, {r0, 0x500}, {r0, 0x8420}, {r0, 0x10}, {r0, 0x1000}, {r0}, {r0, 0x86aa08612fe3a90a}], 0x9, &(0x7f0000000080), &(0x7f00000000c0)={0x101}, 0x8) 15:30:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setlease(r0, 0x400, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'keyringposix_acl_access'}, {0x20, 'vmnet0'}, {0x20, ')'}, {0x20, '{wlan1'}, {}], 0xa, "eeb8876493f97d990d02d75e606691e676cc33d9c95252f2abb1a2d06b14fe398676d9d9c83d904b133249f049323fe767df4dd15bf9fd1f73f9"}, 0x6e) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0xffffffff, {{0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0xfffffffffffffdc0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x800) socket$netlink(0x10, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x3) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 203.882792] binder: 8104:8107 ioctl c018620b 0 returned -14 15:30:56 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0xe9, 0x8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r1, &(0x7f00000000c0)=@l2, &(0x7f0000000140)=0x80, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310, 0x2}], 0xf, 0x0, &(0x7f0000000040)="e9216f1347c5de5b8854fce5c455ec"}) 15:30:56 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x247e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000180)) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff9100170081003100001c04fc52d808b89dfb3ee9198a9fcf24e924819e412f1a4c70cfb07eb4724693a2665335244bb78c966f8ec0af979da9c7086bb4ef308c38345f587e976067eccd2d6993d9672ae109f3b8acea8be1f7f84da002921c8b43d893beaf65ae2bb278"], &(0x7f0000000140)={0x0, 0x1, [0xaf0, 0x60c, 0x9af, 0xc0d]}) [ 203.934849] binder: release 8104:8126 transaction 288 out, still active [ 203.946929] binder: undelivered TRANSACTION_COMPLETE [ 203.978128] binder: release 8104:8107 transaction 287 out, still active [ 203.996246] binder: 8138:8144 ioctl c018620b 0 returned -14 [ 204.008817] binder: undelivered TRANSACTION_COMPLETE [ 204.008835] binder: 8138:8144 BC_DEAD_BINDER_DONE 0000000000000002 not found 15:30:57 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:57 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r3 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x4, 0x4) write$9p(r1, &(0x7f0000000800)="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", 0x600) write$P9_RMKDIR(r1, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x2, 0x8}}, 0x14) ioctl$TCSBRKP(r1, 0x5425, 0x1) sendfile(r1, r2, 0x0, 0x10000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x6) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x9, 0xa, 0xa0, 0xa0}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x7fffffff, 0x0, 0x8, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in6=@dev, 0x3500, 0x0, 0x2, 0x460, 0x1, 0x0, 0xc}}, 0xe8) 15:30:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x7fd, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f00000000c0)={0x6, 0xd345}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000a00000000020000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a22343db4ec641a29551efb74a50d06dbe2f83e597962ab3c631fe9764f9f5cf70aee58ac2f131be0ab9c2208d6278248628e319a07add1e053fd607a55dce987b15f598"], 0x90) 15:30:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) setpriority(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) link(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)=ANY=[@ANYRES32], 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) setuid(0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x80000000000003) prctl$PR_MCE_KILL_GET(0x22) 15:30:57 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = openat(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x80) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r4, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r5, 0x3, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000000140)="f92f8ad2c671641960ef74a09f368ce05b1bed23fb0f96a558d283de564107eaab7e778d1be12eb43e06075cc0", 0x2d, 0x4, 0x0, 0x1, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f00000001c0)="260c63794bfa79caf41b9552c75ba1025d7ec8f52c023ed30630fd1289b9e876440deaf46bfbed3903a439b54fccde8ddcb3d1f929b53e7eda57f29a1c8b23e8cd7eef64d03bcd4b3d16318fea240b35bcd278412291ce008fdfb284564e41e9c75b0af4a79870f9a44e5f19f53413afd892fcaec9f5ccc28881b18b134533bfb9ddf069d3515e13cc1b0e1d09653f5117a9a89b29dad527fa151d288daefb5e986b3451b5eebdd5721a87305ee35455ec6bb5ff0689c57dede80e80", 0xbc, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xf, 0xffffffffffffff7f, r0, &(0x7f00000002c0)="46d099138c04555f7924a3e407f104ea18c24f344c4e4ba95620cf9a74f98d73e4ffacb2e91f6a3e10d3a6fc60f6868305216521fc719852f61bb14eafee40d322e937e962b2f41c72bc356ef3c237bd3646e811670ea474d7c1996581136acf1bbf43848b786894c8f277554011f7e23665af49d24d7caaa2dd8c684035b579b64884cf08e26f95af2df3cfae255a80dff2ac68e0ea390c563907e82f3992d74d102443ffb6a9970d0fecb9c36c6361a53e42f3ff17ae33dd61a7340cc64e4b61665590c950fa60cbdc45", 0xcb, 0x4, 0x0, 0x0, r1}]) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000300)={0x8c, 0x7d, 0x2, {{0x0, 0x61, 0x1, 0x6, {0x10, 0x1, 0x4}, 0x10000, 0x9, 0x1ad6, 0xea32, 0x6, 'cgroup', 0xd, '*selfsecurity', 0xf, 'keyringeth1eth0', 0xc, '-\\-vboxnet1.'}, 0x16, 'vboxnet0cgroup@%ppp0\\,', r2, r3, r4}}, 0x8c) 15:30:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x7) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\'])GPLsystem@'}, {}, {0x20, '{,\xe7posix_acl_accessmime_type\xff'}, {0x20, '{:nodev'}, {}], 0xa, "39eb3cb0e8a9a904cc3aa1c9fdae4e5b8b445e8ffd08d023a015bcbcb083ac90fd760b613b2552bd86c5f178299cfad34f9c3391e521836bd416688ac280ae999a8e129146d90d8efb4226923e5269e30bafaaad56d4e542b154c0e6ce3a5c210488218f2a8ee90dfa89f79938109f18c7d76493d52dab7461f60f66c60bbf56fa21cede18aa17b911225ad457a85733e5680764c2cdb9d959f7f25e6fdd0d0a573b9867157ac935009e607935c70ad25f474f0b143fdd34ef1292f336d0ab090493cf3e97d43b2d3291"}, 0x10b) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x4e23, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0xffffffffffffffff, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) timer_create(0x2, &(0x7f0000000300)={0x0, 0x5, 0x0, @thr={&(0x7f00000001c0)="fdd71a4d40a755d3de17e388b35cf80b1bd8960573eecf7f685d359ae2cf", &(0x7f0000000200)="4aa1cb194eeb04dc0921521cfeb904a302ecae9b9792a541c4bc0ce68b3aa0b0305c9176bb137da6a2155a79ceaa84534029110937ef9898a8bcf5d5ddaaed7e62fda1a8238f708dd9c4e065c670afcd7bfffbca453dca95aedb2a0750c4b89785350cd355b105d304081f8e3814999038b7641da29f259cf18b7987d7b07b72b6038c60557d551055b55a4d69beebef15e1901804da8deeca101bce95c1651ed34fc6620c5568cffb89f9a320d79b579779c2e6a218e0aa4d3c66544aea478291beab0d"}}, &(0x7f0000000340)=0x0) timer_delete(r2) socket$netlink(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000400)={'nat\x00', 0x0, 0x4, 0x3a, [], 0x1, &(0x7f0000000380)=[{}], &(0x7f00000003c0)=""/58}, &(0x7f0000000480)=0x78) r3 = add_key(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="30bac86357c4c8f97a30c1eb10497a8720476ad44115e11b1a866f48d4fb7bfb728f9521ef6e2c88e932997bb88a3e78bb983028ad0175101d8c4d95ab14b208906464433649029c63cd59a9781674c90e70747c081dc9f879949956da0d6a270f21e858ac41f2bd560141034910695bb38bd11f5529308eba9c737538251d5fa85a1b4f891f8e4ee10316f09f6746a126774de7323c74ce6a6ebe999e74bd72a27b0316739435949c69776c581c19243209e596e08f12fbf74130a882b1d03b82f65ea879a1247118c98263f507dcb9ef8c04b65932650d1e2ce810a6b2d8ba033b63eb593245d864e8730837d2", 0xee, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r3) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x16) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc74}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff8000}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:30:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r3 = geteuid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000280)=[0xee00, 0x0, 0xee01, 0xee01, 0x0, 0xee00, 0xee01, 0x0, 0x0]) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r2}, {0x2, 0x6, r3}], {0x4, 0x1}, [{0x8, 0x5, r4}, {0x8, 0x0, r5}], {0x10, 0x4}, {0x20, 0x7}}, 0x44, 0x2) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000100000000000000b9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000"], 0x90) [ 204.781145] binder: 8138:8192 ioctl c018620b 0 returned -14 [ 204.789866] binder: 8138:8191 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 204.797806] binder: release 8138:8144 transaction 289 out, still active [ 204.806671] binder: undelivered TRANSACTION_COMPLETE [ 204.819741] binder: release 8138:8192 transaction 290 out, still active 15:30:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x7fff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r2, 0x4}, @acquire_done={0x40106309, r3, 0x1}, @free_buffer={0x40086303, r4}, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer={0x40086303, r5}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:30:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x7) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\'])GPLsystem@'}, {}, {0x20, '{,\xe7posix_acl_accessmime_type\xff'}, {0x20, '{:nodev'}, {}], 0xa, "39eb3cb0e8a9a904cc3aa1c9fdae4e5b8b445e8ffd08d023a015bcbcb083ac90fd760b613b2552bd86c5f178299cfad34f9c3391e521836bd416688ac280ae999a8e129146d90d8efb4226923e5269e30bafaaad56d4e542b154c0e6ce3a5c210488218f2a8ee90dfa89f79938109f18c7d76493d52dab7461f60f66c60bbf56fa21cede18aa17b911225ad457a85733e5680764c2cdb9d959f7f25e6fdd0d0a573b9867157ac935009e607935c70ad25f474f0b143fdd34ef1292f336d0ab090493cf3e97d43b2d3291"}, 0x10b) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x4e23, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0xffffffffffffffff, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) timer_create(0x2, &(0x7f0000000300)={0x0, 0x5, 0x0, @thr={&(0x7f00000001c0)="fdd71a4d40a755d3de17e388b35cf80b1bd8960573eecf7f685d359ae2cf", &(0x7f0000000200)="4aa1cb194eeb04dc0921521cfeb904a302ecae9b9792a541c4bc0ce68b3aa0b0305c9176bb137da6a2155a79ceaa84534029110937ef9898a8bcf5d5ddaaed7e62fda1a8238f708dd9c4e065c670afcd7bfffbca453dca95aedb2a0750c4b89785350cd355b105d304081f8e3814999038b7641da29f259cf18b7987d7b07b72b6038c60557d551055b55a4d69beebef15e1901804da8deeca101bce95c1651ed34fc6620c5568cffb89f9a320d79b579779c2e6a218e0aa4d3c66544aea478291beab0d"}}, &(0x7f0000000340)=0x0) timer_delete(r2) socket$netlink(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000400)={'nat\x00', 0x0, 0x4, 0x3a, [], 0x1, &(0x7f0000000380)=[{}], &(0x7f00000003c0)=""/58}, &(0x7f0000000480)=0x78) r3 = add_key(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="30bac86357c4c8f97a30c1eb10497a8720476ad44115e11b1a866f48d4fb7bfb728f9521ef6e2c88e932997bb88a3e78bb983028ad0175101d8c4d95ab14b208906464433649029c63cd59a9781674c90e70747c081dc9f879949956da0d6a270f21e858ac41f2bd560141034910695bb38bd11f5529308eba9c737538251d5fa85a1b4f891f8e4ee10316f09f6746a126774de7323c74ce6a6ebe999e74bd72a27b0316739435949c69776c581c19243209e596e08f12fbf74130a882b1d03b82f65ea879a1247118c98263f507dcb9ef8c04b65932650d1e2ce810a6b2d8ba033b63eb593245d864e8730837d2", 0xee, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r3) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 204.831572] binder: undelivered TRANSACTION_COMPLETE [ 204.853722] binder: 8195:8197 ioctl c018620b 0 returned -14 [ 204.863024] binder: 8195:8197 BC_INCREFS_DONE u0000000000000000 no match [ 204.872517] binder: 8195:8197 BC_ACQUIRE_DONE u0000000000000000 no match [ 204.887395] binder: 8195:8197 BC_FREE_BUFFER u0000000000000000 no match [ 204.895968] binder: 8195:8197 Release 1 refcount change on invalid ref 1 ret -22 [ 204.906939] binder: 8195:8197 Release 1 refcount change on invalid ref 2 ret -22 [ 204.923575] binder: 8195:8197 ERROR: BC_REGISTER_LOOPER called without request [ 204.932210] binder: 8195:8197 BC_FREE_BUFFER u0000000000000000 no match [ 204.941685] binder: 8195:8197 got reply transaction with bad transaction stack, transaction 291 has target 3462:0 [ 204.955357] binder: 8195:8197 transaction failed 29201/-71, size 0-8 line 3040 [ 204.968889] binder: 8195:8197 ioctl c018620b 0 returned -14 [ 204.981767] binder: release 8195:8199 transaction 293 out, still active [ 204.991382] binder: undelivered TRANSACTION_COMPLETE [ 205.006642] binder: release 8195:8197 transaction 291 out, still active 15:30:57 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f00002d6000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r0, 0x0) 15:30:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x81fe, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='nlmon0\x00', 0x10) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 'none\x00', 0x200000000000000, 0x1, 0x1d}, 0x1) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000540)=0x8020002) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_destroy(r3) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x40, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x1) 15:30:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="1f00d80000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0xffffffffffffff62, 0x3, 0x4, 0x6}) 15:30:57 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r3 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x4, 0x4) write$9p(r1, &(0x7f0000000800)="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", 0x600) write$P9_RMKDIR(r1, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x2, 0x8}}, 0x14) ioctl$TCSBRKP(r1, 0x5425, 0x1) sendfile(r1, r2, 0x0, 0x10000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x6) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x9, 0xa, 0xa0, 0xa0}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x7fffffff, 0x0, 0x8, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in6=@dev, 0x3500, 0x0, 0x2, 0x460, 0x1, 0x0, 0xc}}, 0xe8) 15:30:57 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000005, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RMKNOD(r3, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x2, 0x0, 0x2}}, 0x14) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x4d, 0x1, 0x100, "1e5e069185e30a0f756aa4c2aba510c6", "17629998a1bd9d2d3227bcf7195677a945f348e1d5f3663eca65a3cdb5eadc08c0b31ae7cb1534273cbd768072aefadd824952baac445253"}, 0x4d, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0xc7c0, 0x2, 0xbc57}) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080)) r4 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 205.290387] binder: 8206:8214 ioctl c018620b 0 returned -14 [ 205.298823] binder: 8206:8214 ioctl c0306201 0 returned -14 [ 205.306850] binder: 8206:8214 ioctl c018620b 0 returned -14 [ 205.310367] binder: 8206:8217 ioctl c0306201 0 returned -14 15:30:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) [ 205.338008] binder: release 8206:8214 transaction 294 out, still active [ 205.347662] binder: undelivered TRANSACTION_COMPLETE [ 205.363903] binder: release 8206:8217 transaction 295 out, still active 15:30:58 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x8, &(0x7f0000000000)='en\x80yr\xf5\x9cv'}, 0x30) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000100)) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/bnep\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r3, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x8000, 0x2, 0x8000, 0xe3}) 15:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0xe88, 0x4) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 205.385902] binder: undelivered TRANSACTION_COMPLETE 15:30:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x7fff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r2, 0x4}, @acquire_done={0x40106309, r3, 0x1}, @free_buffer={0x40086303, r4}, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer={0x40086303, r5}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 205.415478] binder: 8225:8227 ioctl c018620b 0 returned -14 [ 205.442426] binder: 8225:8227 ioctl c018620b 0 returned -14 [ 205.443592] binder: release 8225:8227 transaction 296 out, still active [ 205.456047] binder: undelivered TRANSACTION_COMPLETE 15:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x190) socket$netlink(0x10, 0x3, 0x18) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="a3d5a56f0a41aa9d8e5c77ab0c388ff01721a3d915d1"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x800, 0x0) [ 205.468875] binder: release 8225:8237 transaction 297 out, still active [ 205.477215] binder: 8233:8238 ioctl c018620b 0 returned -14 [ 205.507872] binder: undelivered TRANSACTION_COMPLETE 15:30:58 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef57ddad000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000"], 0x90) [ 205.510230] binder: 8233:8238 BC_INCREFS_DONE u0000000000000000 no match [ 205.533643] binder: 8242:8245 ioctl c018620b 0 returned -14 [ 205.547074] binder: 8233:8238 BC_ACQUIRE_DONE u0000000000000000 no match [ 205.562963] binder: 8242:8245 ioctl c0306201 0 returned -14 [ 205.580171] binder: 8233:8238 BC_FREE_BUFFER u0000000000000000 no match [ 205.582338] binder: 8242:8245 ioctl c018620b 0 returned -14 [ 205.599012] binder: 8242:8251 ioctl c0306201 0 returned -14 [ 205.601930] binder: 8233:8238 Release 1 refcount change on invalid ref 1 ret -22 [ 205.606652] binder: release 8242:8251 transaction 300 out, still active 15:30:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = dup2(r0, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$TIOCCBRK(r1, 0x5428) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) [ 205.632090] binder: undelivered TRANSACTION_COMPLETE [ 205.655389] binder: release 8242:8245 transaction 299 out, still active [ 205.659068] binder: 8233:8238 Release 1 refcount change on invalid ref 2 ret -22 [ 205.674926] binder: undelivered TRANSACTION_COMPLETE [ 205.687267] binder: 8257:8258 ioctl c018620b 0 returned -14 [ 205.694695] binder: 8257:8258 ioctl c0306201 0 returned -14 [ 205.701499] binder: 8257:8258 ioctl 5428 0 returned -22 [ 205.708098] binder: 8257:8258 ioctl c018620b 0 returned -14 [ 205.715136] binder: 8233:8238 ERROR: BC_REGISTER_LOOPER called without request [ 205.719147] binder: 8257:8260 ioctl c0306201 0 returned -14 [ 205.727642] binder: 8233:8238 BC_FREE_BUFFER u0000000000000000 no match [ 205.737095] binder: 8257:8261 ioctl 5428 0 returned -22 [ 205.737634] binder: release 8257:8258 transaction 301 out, still active [ 205.749537] binder: undelivered TRANSACTION_COMPLETE [ 205.755355] binder: 8233:8238 got reply transaction with bad transaction stack, transaction 298 has target 3462:0 [ 205.763038] binder: release 8257:8262 transaction 302 out, still active [ 205.780890] binder: 8233:8238 transaction failed 29201/-71, size 0-8 line 3040 [ 205.783017] binder: undelivered TRANSACTION_COMPLETE [ 205.802386] binder: release 8233:8238 transaction 298 out, still active 15:30:58 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$peekuser(0x3, r1, 0x5) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:58 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0xfffffffffffffffb) 15:30:58 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:58 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x7fff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r2, 0x4}, @acquire_done={0x40106309, r3, 0x1}, @free_buffer={0x40086303, r4}, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer={0x40086303, r5}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000200)="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") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 206.120134] binder: 8270:8273 ioctl c018620b 0 returned -14 [ 206.142850] binder: 8270:8273 BC_INCREFS_DONE u0000000000000000 no match [ 206.155009] binder: 8270:8273 BC_ACQUIRE_DONE u0000000000000000 no match 15:30:58 executing program 5: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33b, 0x0, 0x7, 0x7ff, 0xdf, 0x0, 0x200, 0x7, 0x0, 0x7, 0x0, 0x3c, 0x0, 0x3be, 0x0, 0x0, 0x4, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x9, 0x600, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r3 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x6, 0x1ba, 0x1, 0x1, 0x0, 0x4, 0x22001, 0x2, 0x9, 0x81, 0x3, 0xfffffffffffffffc, 0x1, 0x8, 0x6, 0xffffffffffff3bad, 0x80, 0x8, 0x8, 0x5, 0x3, 0x9, 0x1, 0x100, 0xfc, 0x6, 0x1, 0x3, 0x200, 0x20, 0x4, 0x7, 0xf74b, 0x7, 0x0, 0x6, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x2, 0xb, 0x7, 0x0, 0x7, 0x8001, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000540)={@empty, @initdev}, &(0x7f00000005c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000400)=0x291) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0xffffffffffffff96) 15:30:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f0000000640)={0x14, 0x69, 0x1, {0x46, 0x1, 0x6}}, 0x14) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000540)="fcace6e61d5f1b1ee32a5ba8e06f9adfcba9eee035cb2cf9b38a122497c3227ff7063c395abfd1295fa49efddcf83dfe1927602c140f44c7ac319344cef67d0dbfdf63b9e2e9ae34b2d8ba47a19dfbb6747d46d8668cc4b7370d7ecd2ae139a7462f29069aeb18804aa683ae1a392fe2b30de7da39f9e0a006d09a2c95f2810f3fba23352b22de7b84ad82609abcb45a812c4f7327730c9b2e4da74a4d9de84f79eca5d96a5234cdf4105d327330e4d3da8759d0b0701b950ace9f7510735458610f88d20b9f1acd7c43b5758509796efe60373fcf516535ba47455527d1d03d9aa9e51f", 0xe4, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0xfffffffffffff801, 0x0, 0x8, 0x25f9a4d2, 0x0, 0x2, 0x248, 0x0, 0x7, 0x6, 0x6, 0xf75, 0x3, 0x6, 0x8, 0x7, 0x1, 0x1a2f, 0x3, 0x0, 0x0, 0x0, 0x8, 0x9, 0xffff, 0x0, 0x7ff, 0x1, 0x3ff, 0x8, 0x7, 0x1, 0x8, 0x0, 0xbc31, 0x3f, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xe7}, 0x220, 0x8, 0x9, 0x5, 0x0, 0x80}, 0xffffffffffffffff, 0x9, r0, 0x8) add_key(&(0x7f00000004c0)='encrypted\x00', 0x0, &(0x7f0000001640), 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) ioprio_set$uid(0x0, r2, 0x2) r3 = open(0x0, 0x14000, 0x102) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x7, 0x0, "8c44450561d1b1bc361f9a7949beb5685545c7cac9ecc88e771b09d53afa2df7adab709b5298a1ae87209215657b86f0b185fffe011362f4e1849c564d1445de6abe7fa56813b328142c4b984178f625"}, 0xd8) add_key$user(0x0, 0x0, &(0x7f0000000340)="e809e7ad2afdd290904efb0846787f786ef6d9c23c20b9dae0623b7c787550da9225e3ac1367a9d80386642e1100abd23d83892523f8bf91fbcb831075773722cd9fd46064cfcf751a5d9225164974a4ba1701fa0ad70fdc628ecd43708fae03b5e08ba08a387104749f4ee902e6cbf01f3296d1449338e6ceba2dca1e", 0x7d, 0xfffffffffffffffc) setns(0xffffffffffffffff, 0x1fffc) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x6d, 0x2}, 0x7) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/status\x00', 0x0, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) fcntl$setsig(r4, 0xa, 0x37) pipe(&(0x7f00000001c0)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000080)=0xa000000000000005) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000300)={r3, 0x0, 0xfffffffffffffffc, 0x1f, 0x3ff}) 15:30:58 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='vlan0\x00', 0xfff, 0x8, 0x7fff}) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0x2, 0x5, 0x3ff, 0x8000000, 0x0, 0x1, 0x2, 0x4, 0x7c, 0x6, 0x81, 0xffffffff, 0x1, 0x0, 0x2, 0x56, 0x5, 0x9, 0x3, 0xc26, 0x2, 0xa5e, 0x0, 0x4, 0xff, 0x3, 0x8000, 0x7, 0x800, 0x8, 0x5, 0x6, 0x6aa5, 0x7, 0x7fffffff, 0xa08, 0x0, 0x800, 0x7, @perf_bp={&(0x7f0000000180), 0xa}, 0x20000, 0x7, 0x100000001, 0x5, 0x17, 0x4eb, 0x2}, r2, 0x1, 0xffffffffffffffff, 0x1) pwritev(r1, &(0x7f0000000180), 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 206.175864] binder: 8270:8273 BC_FREE_BUFFER u0000000000000000 no match [ 206.206585] binder: 8270:8273 Release 1 refcount change on invalid ref 1 ret -22 15:30:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x40, 0x7fff, 0x4, 0xee5, 0x9, 0x6}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 206.233544] binder: 8270:8273 Release 1 refcount change on invalid ref 2 ret -22 [ 206.257010] binder: 8270:8273 ERROR: BC_REGISTER_LOOPER called without request [ 206.265533] binder: 8270:8273 BC_FREE_BUFFER u0000000000000000 no match [ 206.275160] binder: 8270:8273 got reply transaction with bad transaction stack, transaction 304 has target 3462:0 15:30:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x100, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x10013, r0, 0x40) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) ioctl$KDDISABIO(r1, 0x4b37) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x387) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) [ 206.337221] binder: 8270:8273 transaction failed 29201/-71, size 0-8 line 3040 15:30:59 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(r0, &(0x7f00000000c0)=@tipc, &(0x7f0000000000)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xac296c37081a4a3b}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x118, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbd96}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9a4f}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd600}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) socket$inet(0x2, 0x2, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) 15:30:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") flock(r0, 0x4) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x7fff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r2, 0x4}, @acquire_done={0x40106309, r3, 0x1}, @free_buffer={0x40086303, r4}, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer={0x40086303, r5}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 206.386697] binder: release 8270:8273 transaction 304 out, still active 15:30:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4bb640f2c773ea2351a1392716c8b9658c34b1e89c8a54dde70092779ca1e954edf2967a7b94b70b04c43c6184aed9d18154d73714b840f2b6cfe4a352f32cefa112969e3b01ba9e79778e57460d77f62cc4edc6ef1733af82b8f950d40ee1af8da6f13fd3080752b7b35d5ff02273e75c8ca17c2441ca347fc34c192d119e7d1af9081387d7e077fafcda17c4dfe14c62fc8b2610f6327876020000000000000000e75e07ee87d79c40d6b50c751f21f8f461ee1e2898a1781c83959b6c2be1004c422f13cc7cd6096d0dee6f7ef001f97d46a09ab966edd9ed256caea7f5299ac15eaf59d36a234dd52efdf4301d24e807e5bcfb7b6c63d43ef3cf962b54b0000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 206.428723] binder: 8322:8324 ioctl c018620b 0 returned -14 [ 206.452823] binder: 8322:8324 BC_INCREFS_DONE u0000000000000000 no match [ 206.467427] binder: 8322:8324 BC_ACQUIRE_DONE u0000000000000000 no match 15:30:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff0200000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x17) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x100000001) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540), 0xffffffffffffe61, 0x7) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 206.490865] binder: 8322:8324 BC_FREE_BUFFER u0000000000000000 no match [ 206.505725] binder: 8322:8324 Release 1 refcount change on invalid ref 1 ret -22 [ 206.523740] binder: 8322:8324 Release 1 refcount change on invalid ref 2 ret -22 15:30:59 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000001c0)=""/233, 0xc9, 0x0) r1 = creat(&(0x7f0000000500)='./file1\x00', 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000009c0)={0x3, 0x70, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x6, 0x5, 0x200, 0xffffffffffffff75, 0x5, 0x8f20, 0x0, 0x2, 0x8, 0x1000, 0xb00, 0xffffffffffffffe0, 0xcd6, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x8000, 0x1ff, 0x1, 0x101, 0xa, 0x6, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x3}, 0x2000, 0x0, 0x0, 0x7, 0x8, 0x1, 0x3ff}, 0x0, 0xb, r2, 0x2) r3 = inotify_init() r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='fd\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) rt_sigprocmask(0x0, &(0x7f0000000380)={0x1}, &(0x7f00000003c0), 0x8) add_key(0x0, &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r6) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000a40)=0x0) timer_gettime(r7, &(0x7f0000000a80)) ioctl$sock_inet_SIOCGARP(r3, 0x8954, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) syz_emit_ethernet(0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) 15:30:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7ff, @empty, 0x7e}, 0x1c) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 206.543024] binder: 8322:8324 ERROR: BC_REGISTER_LOOPER called without request [ 206.568541] binder: 8322:8324 BC_FREE_BUFFER u0000000000000000 no match 15:30:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x80, 0x4) 15:30:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x7fff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r2, 0x4}, @acquire_done={0x40106309, r3, 0x1}, @free_buffer={0x40086303, r4}, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 206.585073] binder: 8322:8324 got reply transaction with bad transaction stack, transaction 306 has target 3462:0 [ 206.605510] binder: 8322:8324 transaction failed 29201/-71, size 0-8 line 3040 [ 206.631272] binder: release 8322:8324 transaction 306 out, still active [ 206.677662] binder: 8359:8361 ioctl c018620b 0 returned -14 [ 206.685412] binder: 8359:8361 BC_INCREFS_DONE u0000000000000000 no match [ 206.694322] binder: 8359:8361 BC_ACQUIRE_DONE u0000000000000000 no match [ 206.701849] binder: 8359:8361 BC_FREE_BUFFER u0000000000000000 no match [ 206.708766] binder: 8359:8361 Release 1 refcount change on invalid ref 1 ret -22 [ 206.717042] binder: 8359:8361 Release 1 refcount change on invalid ref 2 ret -22 [ 206.725133] binder: 8359:8361 ERROR: BC_REGISTER_LOOPER called without request [ 206.733570] binder: 8359:8361 BC_FREE_BUFFER u0000000000000000 no match [ 206.740793] binder: 8359:8361 got reply transaction with bad transaction stack, transaction 308 has target 3462:0 [ 206.751836] binder: 8359:8361 transaction failed 29201/-71, size 0-8 line 3040 [ 206.763252] binder: release 8359:8361 transaction 308 out, still active 15:30:59 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x100000001) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540), 0xffffffffffffe61, 0x7) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3f) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x9, 0x401, 0x3f, 0x4, 0x200, 0x100000000}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip6_m\xf2\x16\x17\\\x02\xdd') fcntl$setpipe(r3, 0x407, 0x472) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)="9714b7b60d9c491dcd1e592eee2ec42129ed8a9a5444bc2b1a8c98a94caff62d2f2b0c05f68f92b4623c4f4b505284de67bd25392b304913a3162e3ed1008628428dadf9f052a2fa857370bdf41f8c456fd018cccc4e0550711e3022a51c7aa22ef78e3cd4f49bdd11e48ff4f809afe48f709c9dc877d4dd03f476ac00") sync() pwritev(r3, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:30:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'none\x00', 0x8, 0x0, 0x2c}, 0x2c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000087ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000003c0000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:30:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x7fff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r2, 0x4}, @acquire_done={0x40106309, r3, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:30:59 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000001c0)=""/233, 0xc9, 0x0) r1 = creat(&(0x7f0000000500)='./file1\x00', 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000009c0)={0x3, 0x70, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x6, 0x5, 0x200, 0xffffffffffffff75, 0x5, 0x8f20, 0x0, 0x2, 0x8, 0x1000, 0xb00, 0xffffffffffffffe0, 0xcd6, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x8000, 0x1ff, 0x1, 0x101, 0xa, 0x6, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x3}, 0x2000, 0x0, 0x0, 0x7, 0x8, 0x1, 0x3ff}, 0x0, 0xb, r2, 0x2) r3 = inotify_init() r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='fd\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) rt_sigprocmask(0x0, &(0x7f0000000380)={0x1}, &(0x7f00000003c0), 0x8) add_key(0x0, &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r6) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000a40)=0x0) timer_gettime(r7, &(0x7f0000000a80)) ioctl$sock_inet_SIOCGARP(r3, 0x8954, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) syz_emit_ethernet(0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaa00000800000086dd60b409000000ffffe0000002ff020000880090780007040060b680fa6f2ab775f62f5e000000000000000000000000180209001200000000000000000000000000ffffac14e985ffbb00000000000000000000000000fcffffffffffffdb064db25e6a7a9351a50abed93bb27c56283f940a8084e3a5d7a27c1afb102b882000000000000000d821d57359105421779819264161cf3dc2ae6c54cd775e3d742fa0ffffa8ccc284552b99636996d393dc539767a48edce27ba9c31d30406363ac92806c74c6fd0b487dfbca17594b770b0000f2d9356eb331239c879d02eb311f8a3183611869ed000000000000000000000000"], 0x0) 15:31:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 207.249550] binder: 8370:8374 ioctl c018620b 0 returned -14 [ 207.278127] binder: 8370:8374 BC_INCREFS_DONE u0000000000000000 no match 15:31:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ppp\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000002900)=@abs, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000002640), 0xb33, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000240)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x40, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002b80)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000440)=ANY=[]}}, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000100)) ptrace(0x10, r6) write$P9_RREMOVE(r4, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x73, 0x1000, 0x6, 0x84, 0x0, 0x6, 0xe001c, 0x1, 0x6, 0x100, 0xff, 0x9, 0x1, 0x2, 0x6, 0x6, 0x2, 0x8, 0x8, 0x8, 0xe5e, 0x7, 0x10000, 0xcb0, 0x7, 0x80000000, 0x3, 0x0, 0x100000001, 0x1, 0x325, 0x7ff, 0xfffffffffffffffd, 0x0, 0x3, 0x8, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000440), 0x5}, 0x20000, 0x1, 0x6, 0x7, 0x1000, 0xfff, 0x420}, r6, 0xb, 0xffffffffffffff9c, 0xb) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002680)={@remote}, &(0x7f00000026c0)=0x8) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000500)=ANY=[@ANYBLOB="03005f005880d2b5d0baea4ee84da2207a38fffff96e2a61c82bba4a3e69b72e862301ca7afd647570154c07acb844fb1575fbe995875ba9eb729c4d78725c54dd4f90aba3a47e0e13f4719417c90ae166c6b1cdfa4e010001000000c7fabb17264b6eec1edeaa153428bea825906f8778d0d37bb61cb623f10fad5ffbf390143897fb4c6b043e2058c390c08995375ee29893a2e65952545ccaba2693e6f6f2529e693aa65eb8c81d86b2000000d816630143940800000000000000d01f03f695be94f1d279c5e258a00fc9c71fb2d123497b6300000000000000000000000000000000000000000000000000000000"]) wait4(r6, &(0x7f00000003c0), 0x200000000000, &(0x7f0000000300)) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000000c0)={0xffffffff, 0x7f, 0x0, 0x8, 0x10001, 0x100000001}) write$selinux_create(r3, &(0x7f0000000600)=@access={'system_u:object_r:auditd_log_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x3f}, 0x46) [ 207.292757] binder: 8370:8374 BC_ACQUIRE_DONE u0000000000000000 no match [ 207.322745] binder: 8370:8374 BC_FREE_BUFFER u0000000000000000 no match [ 207.336381] binder: 8370:8374 Release 1 refcount change on invalid ref 1 ret -22 15:31:00 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x400000, 0x80000000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r0, 0x68, 0x7, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r2, 0x6b2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r3, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sendto$inet6(r1, &(0x7f0000000040)="867fa134ce7d822c974138d050a0810b4735448320e6d51681cbc989703c9318558b9b8f1a1dec82017ed59b1eaecdec5f98b043a448d421d63fcc7208232dc1e60f1bd4d4477aff17509b1f864607dc656992b0d86956004f70004e9aff27c8c530e19c4f9af73ee1aa8da737250cc83c0586af9e6f52221bfdb2e7e55e03c333c5", 0x82, 0x20000000, 0x0, 0x0) [ 207.350557] binder: 8370:8374 Release 1 refcount change on invalid ref 2 ret -22 [ 207.368146] binder: 8370:8374 ERROR: BC_REGISTER_LOOPER called without request [ 207.377342] binder: 8370:8374 BC_FREE_BUFFER u0000000000000000 no match [ 207.387700] binder: 8370:8374 got reply transaction with bad transaction stack, transaction 310 has target 3462:0 15:31:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r2, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 207.413818] binder: 8370:8374 transaction failed 29201/-71, size 0-8 line 3040 [ 207.427903] binder: release 8370:8374 transaction 310 out, still active 15:31:00 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @remote}}}}, &(0x7f0000000140)=0xe8) r1 = socket$inet6(0xa, 0x80001, 0x0) fsetxattr(r1, &(0x7f0000000180)=@random={'user.', ',vmnet0\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b21a0000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x20000000, @mcast1}}}, 0x119) [ 207.498932] binder: 8403:8406 ioctl c018620b 0 returned -14 [ 207.517159] binder: 8403:8406 BC_INCREFS_DONE u0000000000000000 no match [ 207.534486] binder: 8403:8406 BC_ACQUIRE_DONE u0000000000000000 no match [ 207.548343] binder: 8403:8406 BC_FREE_BUFFER u0000000000000000 no match [ 207.564283] binder: 8403:8406 Release 1 refcount change on invalid ref 1 ret -22 [ 207.580405] binder: 8403:8406 Release 1 refcount change on invalid ref 2 ret -22 [ 207.598757] binder: 8403:8406 ERROR: BC_REGISTER_LOOPER called without request [ 207.614403] binder: 8403:8406 BC_FREE_BUFFER u0000000000000000 no match [ 207.629309] binder: 8403:8406 got reply transaction with bad transaction stack, transaction 312 has target 3462:0 [ 207.650943] binder: 8403:8406 transaction failed 29201/-71, size 0-8 line 3040 [ 207.671035] binder: release 8403:8406 transaction 312 out, still active 15:31:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:00 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x24, 0x1c, 0x5, 0x6, 0x4, 0x800, 0x3, 0x10f, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup3(r0, r0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x10000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12634840000000000000000001000000000000000000000010000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="30000000c9ab0b11efe62a000000007800000000000000380000000000000000000000000000007800000000000000"], @ANYBLOB="050000000000000000634040040000000000000001000000000000000000000011000000000000000000000038000000000000002000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a62770a010000", @ANYRES64=r6, @ANYBLOB="02000000000000008561646600000000020000000000000001000000000000000c00000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00']], 0xffffffffffffff26, 0x0, 0x0}) 15:31:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) ftruncate(r1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x8ecd, @mcast2, 0x3a6}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:31:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2d, 'memory'}, {0x2b, 'rdma'}, {0x2d, 'io'}]}, 0x1c) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x11b) ioctl$TCXONC(r3, 0x540a, 0x1658) 15:31:00 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a0002, 0x0) fdatasync(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, &(0x7f0000000440)=""/46, 0x2e) r3 = socket$inet6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000dcd000/0x1000)=nil, 0x1000, &(0x7f0000001f00)=""/4096) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fd6000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000aa8000/0x2000)=nil) munlockall() r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) r5 = socket(0xa, 0x1, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000240)={0x7, 0x5}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1c}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0xf5d, 0x3, 0x0, 0x2, 0xffffffff, 0x20000, r7}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r7}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000480)={@mcast2, @mcast1, @loopback, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r7}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0xfab, 0x0, 0x3, 0x2, 0xffffffffffffff9c, 0x7}, 0x2c) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) [ 208.007004] binder: 8417:8419 ioctl c018620b 0 returned -14 [ 208.047789] binder: 8417:8419 BC_INCREFS_DONE u0000000000000000 no match [ 208.064006] binder: 8417:8419 BC_ACQUIRE_DONE u0000000000000000 no match [ 208.084528] binder: 8417:8419 BC_FREE_BUFFER u0000000000000000 no match 15:31:00 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockname$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() unlink(&(0x7f0000000180)='./file0\x00') pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0xe0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000001c0)=0x1) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 208.102156] binder: 8417:8419 Release 1 refcount change on invalid ref 1 ret -22 [ 208.121715] binder: 8417:8419 Release 1 refcount change on invalid ref 2 ret -22 [ 208.155970] binder: 8417:8419 ERROR: BC_REGISTER_LOOPER called without request [ 208.176844] binder: 8417:8419 BC_FREE_BUFFER u0000000000000000 no match 15:31:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x4d, @empty, 0x1}, {0xa, 0x4e22, 0xfffffffffffff000, @mcast1}, 0x8, [0x7, 0x5f, 0x200, 0x1000000, 0x2, 0x0, 0x0, 0x5]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbff0000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000011010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 208.208881] binder: 8417:8419 got reply transaction with bad transaction stack, transaction 314 has target 3462:0 15:31:00 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) openat(r0, 0x0, 0xfffffffffffffffc, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 208.263059] binder: 8417:8419 transaction failed 29201/-71, size 0-8 line 3040 [ 208.309882] binder: release 8417:8419 transaction 314 out, still active [ 208.340907] FAT-fs (loop5): bogus number of reserved sectors [ 208.361865] FAT-fs (loop5): Can't find a valid FAT filesystem [ 208.528257] FAT-fs (loop5): bogus number of reserved sectors [ 208.550737] FAT-fs (loop5): Can't find a valid FAT filesystem 15:31:01 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) wait4(0x0, 0x0, 0x0, 0x0) 15:31:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:31:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:01 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/95) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:01 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a0002, 0x0) fdatasync(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, &(0x7f0000000440)=""/46, 0x2e) r3 = socket$inet6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000dcd000/0x1000)=nil, 0x1000, &(0x7f0000001f00)=""/4096) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fd6000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000aa8000/0x2000)=nil) munlockall() r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) r5 = socket(0xa, 0x1, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000240)={0x7, 0x5}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1c}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0xf5d, 0x3, 0x0, 0x2, 0xffffffff, 0x20000, r7}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r7}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000480)={@mcast2, @mcast1, @loopback, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r7}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0xfab, 0x0, 0x3, 0x2, 0xffffffffffffff9c, 0x7}, 0x2c) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 15:31:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffffffffff311, @empty, 0x5}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 208.852737] binder: 8462:8467 ioctl c018620b 0 returned -14 15:31:01 executing program 0: mkdir(&(0x7f0000001c40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) [ 208.895026] binder: 8462:8467 BC_INCREFS_DONE u0000000000000000 no match [ 208.916856] binder: 8462:8467 BC_ACQUIRE_DONE u0000000000000000 no match 15:31:01 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="70ff379a58dfbc34bea41ebae0aab54e"}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x98c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb09}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x8}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="0c002dbd7000fddbdf251600000034000600080001000200000004000200040002000400020008000100860000000400020004000200040002000400020004000200fe0009000800020000080000080002000700000008000100090000e308000100fffeffff0800020004010000080001000700000008000200080000001c00010001000000080001005e990000"], 0x94}, 0x1, 0x0, 0x0, 0x20004090}, 0x40) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 208.946344] binder: 8462:8467 BC_FREE_BUFFER u0000000000000000 no match [ 208.968180] binder: 8462:8467 Release 1 refcount change on invalid ref 1 ret -22 15:31:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x7, 0xd3, 0x0, 0x8, 0x800, 0x5, 0x8, 0x3, 0x3f, 0x20, 0x401, 0x5, 0x0, 0x81, 0x8, 0x2, 0x4, 0xffffffffffffd78e, 0xffffffffffffe545, 0x4, 0x0, 0x9, 0x8, 0x5, 0x8, 0x4e84, 0x2, 0x83, 0x712fa404, 0x1, 0x6, 0xff, 0x0, 0x9, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x3}, 0x480, 0x10001, 0x5, 0x7, 0x10000, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffff9c, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='systemvboxnet0\\em0\x00') getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '{lo-vboxnet0-'}, &(0x7f0000000140)='systemvboxnet0\\em0\x00', 0x13, 0x3) socket$packet(0x11, 0x2, 0x300) [ 208.990168] binder: 8462:8467 Release 1 refcount change on invalid ref 2 ret -22 [ 209.019267] binder: 8462:8467 ERROR: BC_REGISTER_LOOPER called without request [ 209.049611] binder: 8462:8467 BC_FREE_BUFFER u0000000000000000 no match [ 209.053548] FAT-fs (loop5): bogus number of reserved sectors 15:31:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 209.068139] FAT-fs (loop5): Can't find a valid FAT filesystem [ 209.072908] binder: 8462:8467 got reply transaction with bad transaction stack, transaction 316 has target 3462:0 [ 209.084921] binder: 8462:8467 transaction failed 29201/-71, size 0-8 line 3040 [ 209.096689] binder: release 8462:8467 transaction 316 out, still active 15:31:01 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) r2 = openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) 15:31:01 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2b6edaacafca0a4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x6) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 15:31:01 executing program 5: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x10000000000027e, 0x0) open$dir(0x0, 0x0, 0x0) [ 209.178993] binder: 8507:8509 ioctl c018620b 0 returned -14 [ 209.187748] binder: 8507:8509 BC_INCREFS_DONE u0000000000000000 no match [ 209.195248] binder: 8507:8509 BC_ACQUIRE_DONE u0000000000000000 no match [ 209.202901] binder: 8507:8509 BC_FREE_BUFFER u0000000000000000 no match 15:31:01 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000580)={{0x2, 0x4e21, @empty}, {0x307, @local}, 0x40, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 'netdevsim0\x00'}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/254, 0xfe}], 0x4, &(0x7f00000002c0)=""/126, 0x7e}, 0x2000) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) r2 = add_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="4c871631cb3098924a2ae353fc7b8e40558147d4215f64b17d990f4b59c35d86992641518e6664f2bd1633a065", 0x2d, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000380)="abe6e03cfb9eb196420db0ba9e739460ebceb5f8e3a8ccfc67d3d96c3faaeeedec2053c4e5e163fe8b48223894c5ff8865cbe6b77405fe79a292bbc50e", 0x3d, r2) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) sched_getparam(r3, &(0x7f00000004c0)) [ 209.226673] binder: 8507:8509 Release 1 refcount change on invalid ref 1 ret -22 [ 209.236958] binder: 8507:8509 Release 1 refcount change on invalid ref 2 ret -22 [ 209.251506] binder: 8507:8509 ERROR: BC_REGISTER_LOOPER called without request [ 209.261202] binder: 8507:8509 BC_FREE_BUFFER u0000000000000000 no match 15:31:01 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) r2 = openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) [ 209.272747] binder: 8507:8509 got reply transaction with bad transaction stack, transaction 318 has target 3462:0 [ 209.294837] binder: 8507:8509 transaction failed 29201/-71, size 0-8 line 3040 15:31:02 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) fsetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7356c20569aa5278596e65742f69676d0800"], 0x0, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/26, 0x1a) [ 209.328979] binder: release 8507:8509 transaction 318 out, still active 15:31:02 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005e80)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000005c80)=[{{&(0x7f00000000c0), 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/251, 0xfb}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/190, 0xbe}], 0x3, &(0x7f00000003c0)=""/4096, 0x1000}, 0x6c0}, {{&(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001440)=""/57, 0x39}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/152, 0x98}], 0x3, &(0x7f0000002580)=""/68, 0x44}, 0x9ce0}, {{&(0x7f0000002600)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000002680)=""/128, 0x80}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x2, &(0x7f0000003740)=""/241, 0xf1}, 0x5253}, {{&(0x7f0000003840)=@nl=@unspec, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/236, 0xec}], 0x1, &(0x7f0000003a00)=""/216, 0xd8}, 0x400}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003b00)=""/137, 0x89}, {&(0x7f0000003bc0)=""/216, 0xd8}, {&(0x7f0000003cc0)=""/204, 0xcc}, {&(0x7f0000003dc0)=""/196, 0xc4}], 0x4}, 0x3f}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/84, 0x54}, {&(0x7f0000003f80)=""/168, 0xa8}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/246, 0xf6}, {&(0x7f0000005140)=""/129, 0x81}, {&(0x7f0000005200)=""/255, 0xff}, {&(0x7f0000005300)=""/9, 0x9}, {&(0x7f0000005340)=""/139, 0x8b}], 0x8, &(0x7f0000005480)=""/207, 0xcf}, 0x1}, {{&(0x7f0000005580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005600)=""/242, 0xf2}, {&(0x7f0000005700)=""/66, 0x42}, {&(0x7f0000005780)=""/39, 0x27}, {&(0x7f00000057c0)=""/101, 0x65}], 0x4, &(0x7f0000005880)=""/175, 0xaf}, 0x4}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000005940)=""/249, 0xf9}, {&(0x7f0000005a40)=""/181, 0xb5}, {&(0x7f0000005b00)=""/2, 0x2}, {&(0x7f0000005b40)=""/154, 0x9a}], 0x4, &(0x7f0000005c40)=""/16, 0x10}, 0x9}], 0x8, 0x122, &(0x7f0000005ec0)={r3, r4+10000000}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000005f00)=0x9, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000005fc0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000006080)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x200380}, 0xc, &(0x7f0000006040)={&(0x7f0000006000)={0x1c, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7cf36c74) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) keyctl$join(0x1, &(0x7f0000005f40)={'syz', 0x1}) 15:31:02 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000580)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01]) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x5}, [{0x2, 0x4, r1}, {0x2, 0x3, r2}], {0x4, 0x3}, [{0x8, 0x7, r3}, {0x8, 0x3, r4}, {0x8, 0x2, r5}, {0x8, 0x2, r6}, {0x8, 0x4, r7}, {0x8, 0x1, r8}], {0x10, 0x1}, {0x20, 0x1}}, 0x64, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r9, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r9, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:02 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000580)={{0x2, 0x4e21, @empty}, {0x307, @local}, 0x40, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 'netdevsim0\x00'}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/254, 0xfe}], 0x4, &(0x7f00000002c0)=""/126, 0x7e}, 0x2000) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) r2 = add_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="4c871631cb3098924a2ae353fc7b8e40558147d4215f64b17d990f4b59c35d86992641518e6664f2bd1633a065", 0x2d, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000380)="abe6e03cfb9eb196420db0ba9e739460ebceb5f8e3a8ccfc67d3d96c3faaeeedec2053c4e5e163fe8b48223894c5ff8865cbe6b77405fe79a292bbc50e", 0x3d, r2) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) sched_getparam(r3, &(0x7f00000004c0)) [ 209.752274] binder: 8535:8540 ioctl c018620b 0 returned -14 [ 209.770537] binder: 8535:8540 BC_INCREFS_DONE u0000000000000000 no match [ 209.786463] binder: 8535:8540 BC_ACQUIRE_DONE u0000000000000000 no match 15:31:02 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4596fb60a451d26e2b4f3ed0a3cb78f3d0c5b51ab3b076bdd1f4aae87232a7940b8bdab4f6c4574ff6927014bf31b56fc2120c6af6a06889936c0181f67637d5b060", 0x42}, {&(0x7f0000000140)="0d7c7dad819d6ad44cf7d6bf5c4975292848edcc46ab82c2fcef72b50406ecb84cb6dc41094d674d75b39ecbb1711a2002418f5c2a0abea505ccd17efccc98001b4dbd5ac21d8163687506fe2bc5e3f7bad7b294ac9a87990b8020cd36ba9e9eb2d735882f52e475e3af959b00a7af13921be185ea5f5f94cc4c2f728ef155c41d7743a8e6744981ec24d3b3a4ba2924008aa0c750449f387182f14e046e3c1d4c639783b3135fb4c94c719c39d56a939b685d85a8c3da77ee6f2266b2f6db", 0xbf}, {&(0x7f0000000200)="292c0030323fbf5f0225989376eee4a654b5ff719e35554912031b1e797739499cfe2283114c64efbdc8abf0341da65de722c0f0ee2ba45efadeb499242e644a03a2d5217a279ee0508dfd2d2f5c0afa8ce9c0ab5bbb3afa256ddb8a9d46d0ac3f5c872d5e007b710bf559c532d6953304cd265b4735cdcfeaf668239a70e12010aa92a0487fb3b29233f007f954cf5ac397bd841de856f35c8f00de4e8a9a", 0x9f}], 0x3, 0x6) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:02 executing program 5: socket(0x10, 0x2, 0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = gettid() clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) poll(&(0x7f0000000040)=[{}, {}], 0x2, 0x8) ptrace(0x10, r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1000000000000191, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0xfffffffffffffd39}, 0x80000001}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00\x00\x00\x00\x01\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f000060b000/0x2000)=nil, 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9, 0x3, 0x1800000000000000}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x1000008, 0x33, r3, 0x800000000000005b) unshare(0x28000bfe) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000000c0)) open$dir(&(0x7f0000000400)='./file0\x00', 0x80004, 0x0) perf_event_open(&(0x7f0000000580)={0xffffffffffffffff, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 209.801504] binder: 8535:8540 BC_FREE_BUFFER u0000000000000000 no match [ 209.818802] binder: 8535:8540 Release 1 refcount change on invalid ref 1 ret -22 15:31:02 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 209.851574] binder: 8535:8540 Release 1 refcount change on invalid ref 2 ret -22 [ 209.873739] binder: 8535:8540 ERROR: BC_REGISTER_LOOPER called without request 15:31:02 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 209.902244] binder: 8535:8540 BC_FREE_BUFFER u0000000000000000 no match [ 209.918833] binder: 8535:8540 got reply transaction with no transaction stack [ 209.935754] binder: 8535:8540 transaction failed 29201/-71, size 0-8 line 3025 15:31:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 210.010777] binder: 8565:8567 ioctl c018620b 0 returned -14 [ 210.031238] binder: 8565:8567 BC_INCREFS_DONE u0000000000000000 no match [ 210.044003] binder: 8565:8567 BC_ACQUIRE_DONE u0000000000000000 no match 15:31:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000001c0)) r0 = socket(0x10, 0x0, 0x0) pipe(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/168, &(0x7f0000000000)=0xa8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000480)="220000001e00070700be5bcea13e07010af000a3baf9d825d08ced685bf41e0058", 0x21) 15:31:02 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xfffffffffffffffb) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x8, 0xc36]) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\xf0,\x00', 0xffffffffffffffff) keyctl$update(0x2, r2, 0x0, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0xfffffffffffffefe) 15:31:02 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 210.062738] binder: 8565:8567 BC_FREE_BUFFER u0000000000000000 no match [ 210.069776] binder: 8565:8567 Release 1 refcount change on invalid ref 1 ret -22 [ 210.085268] binder: 8565:8567 Release 1 refcount change on invalid ref 2 ret -22 [ 210.095663] binder: 8565:8567 ERROR: BC_REGISTER_LOOPER called without request [ 210.105166] binder: 8565:8567 BC_FREE_BUFFER u0000000000000000 no match [ 210.113485] binder: 8565:8567 got reply transaction with no transaction stack [ 210.121108] binder: 8565:8567 transaction failed 29201/-71, size 0-8 line 3025 15:31:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet6(0xa, 0x4, 0x20000001) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e22, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) 15:31:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0)=0x40000, 0x800100007fe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:03 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x4, &(0x7f0000000340)=[{&(0x7f0000000140)="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", 0xff, 0xffff}, {&(0x7f0000001440)="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", 0x1000, 0x100000001}, {&(0x7f0000000240)="78c3215848cb3fef1b20ecc3c481978701ef1ddacf3da44a59a672bac069e1992cf9209e4da0cceaf3560a05b32dfff702e5d09f6b88fb4bfac44fb51c5cd86b2de9d383c2ae405437fb2a781b6da96cc6fbc487151d122289d9ad2c0fff53bb2262b3e71eaf105faf3274728d7b8a49b26ff15b6982f6d78121b7191b3cdcf45746e4cb3621337f3254af4d5473fce98a39", 0x92, 0x7}, {&(0x7f0000000300)="0779840051033fa7dfae77602faccfaac1e81f481463fa46d41287278d449e6371d42ab0", 0x24, 0x400}], 0x2080, &(0x7f0000000440)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@abort='abort'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nolazytime='nolazytime'}, {@commit={'commit', 0x3d, 0x7f}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r1}}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:03 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 210.568020] binder: 8586:8589 ioctl c018620b 0 returned -14 [ 210.576414] binder: 8586:8589 BC_INCREFS_DONE u0000000000000000 no match [ 210.583502] binder: 8586:8589 BC_ACQUIRE_DONE u0000000000000000 no match [ 210.591240] binder: 8586:8589 BC_FREE_BUFFER u0000000000000000 no match [ 210.605039] binder: 8586:8589 Release 1 refcount change on invalid ref 1 ret -22 15:31:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @loopback, 0x0}, &(0x7f0000000180)=0xc) r4 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@remote, 0x4e21, 0x100000000, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x5e, r3, r4}, {0x80, 0x0, 0xfffffffffffffffd, 0x4, 0x2, 0x80, 0x2, 0xffffffffffffffff}, {0x10000, 0x2, 0x5, 0x663b2f6}, 0x9, 0x6e6bb6, 0x0, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d3, 0x7f}, 0x2, @in=@empty, 0x3505, 0x1, 0x1, 0x8, 0x9, 0x5, 0x7ff}}, 0xe8) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x3, 0x4, 0x8, 0x2, r2}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000300)={0x100000001, 0x4, 0x2}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x7fffffff, @rand_addr="4892c1b4c4fb823de3f57979797f1f90", 0x200}, 0x1c) fcntl$lock(r6, 0x6, &(0x7f00000000c0)={0x9e3de0bdf0e7c467, 0x0, 0x4, 0x2, r2}) [ 210.625525] binder: 8586:8589 Release 1 refcount change on invalid ref 2 ret -22 [ 210.633383] binder: 8586:8589 ERROR: BC_REGISTER_LOOPER called without request [ 210.641195] binder: 8586:8589 BC_FREE_BUFFER u0000000000000000 no match [ 210.650847] binder: 8586:8589 got reply transaction with no transaction stack [ 210.659795] binder: 8586:8589 transaction failed 29201/-71, size 0-8 line 3025 15:31:05 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/112) io_setup(0x4ed4, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x658f5902, r0, &(0x7f0000000000)="17e886c5933e3937d33b02a658400d0ec4", 0x11, 0x80000001, 0x0, 0x2, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000000200)="2bc11d0ba164fb3c4b5cb612e5ad6651b0f55fa41ded6e21419e0262254dafa7522f624f771485edffe2ec28742c614bf8555cd61535f309fb025c05755bbbd3d78d21e6c040d5fbfbb82e0862a1afd1de8242e8902662db7aedf1fa0c3b8a0270f4241d7fa270e5ce9d248d055e112fa8e909bf2608af1af3b99f8853750826c42a34d37c5f62a1233186bc1ca3abc98659fc662beacf1e214c1580310598f8633d310f71f9b6c7", 0xa8, 0x7fffffff, 0x0, 0x2, r0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 15:31:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:05 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/113, 0x147db2a4}], 0xfffffffffffff38, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x2) sync() syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0xfffffffffffffffc, 0x0, @loopback}}}, 0xffffffffffffffed) 15:31:05 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) connect(r1, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @mcast2, 0x6}}, 0x80) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001200)="24000000110007031dfffd946f610500000000000500000000000000421baba20400ff7e280000001100ffffba16a0aa1c09000000000000eff24d8238cfa47e23f7efbfcd3d2929e9c6eeda", 0x4c}], 0x1}, 0x0) [ 212.859281] binder: 8614:8616 ioctl c018620b 0 returned -14 [ 212.868963] binder: 8614:8616 BC_INCREFS_DONE u0000000000000000 no match [ 212.878940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.880469] binder: 8614:8616 BC_ACQUIRE_DONE u0000000000000000 no match 15:31:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0x0, 0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000700)='vmnet0security-\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@initdev}}, &(0x7f0000000880)=0xe8) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000980)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@ipv4={[], [], @multicast1}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000ac0)=0xe8) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000bc0)=0x0) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000d80)=0x0) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000e80)=[0x0]) r16 = getpgid(0xffffffffffffffff) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000051c0)=0x0) r20 = geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000005200)={0x0, 0x0, 0x0}, &(0x7f0000005240)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005280)=0x0) lstat(&(0x7f00000052c0)='./file0\x00', &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005380)={0x0, 0x0, 0x0}, 0xfffffffffffffffd) r25 = getpgrp(0x0) getresuid(&(0x7f00000053c0), &(0x7f0000005400)=0x0, &(0x7f0000005440)) getgroups(0x3, &(0x7f0000005480)=[0xee01, 0x0, 0x0]) sendmmsg$unix(r2, &(0x7f0000005540)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000001c0)="abfdddc3290896be598ade4309f2ce088fc28de66680c5a3ea3d2b0e50cd99ec648c7c018047920f867d74b04d8e78aa5d766039a74afed2c1fe481e16043bf868e7a9c1dc2d40c28f3073900176d5baae97ef7eccaeca115caa5f8109fd1cf5eafe482959928df6c688bfce8ef3cf96262d8e4f75e71957287d0fb02f4d461b3b5fe3266f7f863e9041e616ae17f290a63866cc9552a5c079864c05fab3c788a49333477662a2a0242aa28652663f5082dd1bb2a5172f4a88775c61a13c74498022f887", 0xc4}, {&(0x7f00000002c0)="32da2d9e28bc8f54ae067eb6bfcd09a068706af12f94fbb1a9d12ddaf38ef6a84d672020f0ce6a0f85e6f8e0e943b2ca49f96ba52250a96e20d398f2ef50e8aaa07da9a07bbb4a461158ff74debf956d6b50ccecce4db189", 0x58}, {&(0x7f0000000340)="7ba9e6146bfbf7c26a16d1bec13563df8ffe3582dcc93d26e2509dee42f8ddd32057b521124edb19337a61be398c5128daf46cf0009f15c9ee7e9a54fc44b89afbbb62ea6b35ebdc5b35a6275a77b6775bd7", 0x52}, {&(0x7f00000003c0)="6f89da53ed0ad201e166f090d43e795d8a826b5177", 0x15}, {&(0x7f0000000400)="81fa9fcfc41506a9bf6951ef55a22b67ba5c55a582abf9a29f38ab9cde98fcfef973c361bb05bf5544c530b3e730c0ab4672f51b9e947af2be3dbd749df60efd3c94c6c76977f72e5789157ac3a8182b4263dd03ed37bd97c8fd313a50a4a403a5c05bec52fe3288d6e18ca011e6dabf188a0a419514b114805655b26366070aeae8d07ff2badbdb9c7372859857987d3956a8913c369545229884dda99c01093d2bdbc1e279d5740604417a4230c311290f9dac9f55b86368074c780f4abb6d980adf3aaf10a6f2241e74e633cd9783e58a2fec03fd02", 0xd7}, {&(0x7f0000000500)="f30df871695c8b074580623c278e567317eaab024013bf033379db1e23759bedfe8ba07c827c5e58c7", 0x29}, {&(0x7f0000000540)="3c4c1f88ca89687bde2e4068a460abf156c939f0dde1f0cb77e616514cd471", 0x1f}, {&(0x7f0000000580)="ff4a982ca6dbb5f2e8f8bb", 0xb}, {&(0x7f00000005c0)="92b51bcc85fe42dbff57d17300449086add11b3c4c6da4ea3d29399b77ec36e9fe36be986f2c28da9aa8d17bc9aa993fdc7d114e493735046c2ca839f4a363b5a1d2ad018313f278252a41f5a5", 0x4d}], 0x9, &(0x7f0000001040)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x20, 0x1, 0x1, [r3, r3, r1, r3]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x18, 0x1, 0x1, [r3]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r2, r2, r1]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}], 0x100, 0x40000}, {&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000011c0)="ad629e17e551d34acf94586996cc44d6425a53eea961bbfa9f1cde9efae7c7da5916a9f36b365759ce8261f80468c73718236c57d30363849ba165a058b28710d5d1c3a3c411afef89657357bae25356", 0x50}, {&(0x7f0000001240)="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", 0xfb}, {&(0x7f0000001340)="b0224eb0a4684c199b732922cc7d947ef37f7e040cecd6821b3e951b8f397565ab068da2666def3e8a60c6d54df9dcce9ec9740f739b3b84a8681e38a06e049752c03d878208f6bfebccbb25678bc16d262b8680f3bb01e0023c4c7135956b80c61a633247d29825eb81700afd3c82bb94895994c30e888dad8d49c1be8ca950ad06ea6cb3a5cb94274a7f3d7c65fb1df459876c6a6105b41f4ee6ce8cd76dbd5803d808f25832ef1a7795bc6c1dbd603a", 0xb1}, {&(0x7f0000001400)="b1edd475603d181cd390e50a2226c9b7e373feacae378842cc49d8ebfea9b0af1e983f48c58b6a278acac7c1f331074c8bc061e71bf850acd96cee2fe02be2bdc60e81de1856edecadf3c0", 0x4b}, {&(0x7f0000001480)="ebe45ebd11acd2e1d65d045b163e4fc7079f84ef38e171050af667a2c0eed1e229dfbf078cf260ba397ce36a928b0e9e72c3fabf3b719f83642e9d8412ff3bf69c7772f837ddea49c0d0c0b144d55bf6854f3672915b3342869e78bed3fa68732b0bf72f0042c09042d174f5f3c732fe7b01d2ac3bd51099aa389d1e9a0237820d6edff596ef4f118148fc9d268e4c048c24d8dbd551e07ef41b5d6b787ec78f4f35c2b1f8d4006b6eb9", 0xaa}], 0x5, &(0x7f00000015c0)=[@rights={0x28, 0x1, 0x1, [r0, r2, r0, r2, r0, r0]}], 0x28, 0x20008000}, {&(0x7f0000001600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001680)="04b2f7a752c289c7f301d079e835c6974f9038e618035a0efb4bd658481d3e2d85fcbfa0956b6f7353cc893d151c0bbcb73e0a0bc9a3390479c88a895f008710e08d205c25169701cb267a64dc8e2205ac890710eed4539df1f64c9deb1340088c50a77d9be04857ce60cbd29cb5ceabc6ae7cedab5833504ee9431538bd2a167aede1cb399c63f4f8a9a629b7838c2dcf5c65531c0d3cc67ae77738f8cdb11b8055abd10bea5a9fcec0a1e16ec1eac635d66ff7327aec39cbac91810a1b", 0xbe}, {&(0x7f0000001740)}, {&(0x7f0000001780)="b70134794e8a8c0e2cce9bc01d9ca35ba71fd89eaa4e0f43f1c392fa114ddda34e4a", 0x22}, {&(0x7f00000017c0)="c1df0e8ed2c686124a1894df0579825a9bc5a6b8ae6d4d015421eae247e52d7786c813f46fb48f0983f0740c4ee07d217a6e3bdbeeeae5e6365fc5be86c0b311d354c9b17a0c58a51bb82cbd52cbaa2520183b2be9926cf9cf5bdd9caeae5b2a427f6efc5ead364768cfeda6fd0195", 0x6f}], 0x4, 0x0, 0x0, 0x4040}, {&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="a49d5aa701a808ffe8390a01bc6a7a0f0afa18d2f35d7042fe3e61d7522115cc40750be7ec967974f01ce9ca22029d3c709a0055188d72cb480619b40a46a3d55d5d9476130a0ed77aa043847477dd635afae6ce3008526e0f2be35de1edbfa31e0b85d6ab0e4b42c40e6968fff7411f6d", 0x71}, {&(0x7f0000002980)="ce37cd03abe8ff72cb022e35924c4786497354cfd21ae546379bbec5362e4f6e44f72e1a18a80a82d75454f61f4b29c639bbe3d3afe68e2c0f315aecdb39a89277737c3176c2b7c39950fe1bad693e4c8e4fd70f3982be6ee9d83d8166184b09db4c529ba977cf2d8ef3d7dd63ab6ea9472359306c95961a95af7d21ca9190b7d7f5ba3837a6455d5d1a7ee62cf70f0c1fd55f0aff920e1dff128a1ada869744ae26a0e20d3e930461ff67322e73073c8dc940688968c602c88391af69d47ef253c16b01a221e77bacfc1bd61b65dbc2dba326831b6ef3", 0xd7}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f0000003a80)="85c0ad585ab912de98214f7ef5d20d674f3072ea8fc04961304a4b7dea31cc71e383d0fa3aececcdf81f8af7ace5462b70f890d3e4205398c432d67e8e16c891a89e55fec9373701639c23c1f84c2f259d3bab0083f555360a18ab8647d4306d90b67c76ce8f0ec20f3a8e4c037938c338af6b1c894af8bc88e3f5671f5a922cde4768b263f178774da3bd0d49ef23e29f", 0x91}, {&(0x7f0000003b40)="e8ac728605357c1606d70bb1b6c1cac7b4de938ab23b937638461a75c38c09fc8037a83c2a05b5a2c004a5379a13dcc3f3436dc8ab9ebe9f67b9913c4573f38910f293befabe2adb25467fa6b14c477e0d17abe2ba08483e4c7b63ffe712a65328da6ed27495e270a633a489691ba455c0a2e093cb589feb9e0b25606847dd07156765d56913cd0a875b4845c52499af8efdb023519f2f8fccc5540dbec2835e90f992d5b0111f79b0c2b98d9e9356b31330690a8920a1b6ec64e8c0e51ea9dafa3c8e47426cd9d86e80aed977cc2794eec5b622cfb617ef9325fe46004cf223566f3a965953184e43da9348187af300a9f0dc2813220506a57931", 0xfb}, {&(0x7f0000003c40)="7da8d26b44339a0f7e97ce56abae7f74bf1c5656144ba569ecae19e002d51231e080824885133f0de5a26a3ddd71d8410f618f57d34be6978fe19932d5f7268842a9df7fc96d08bfde73a5bf1e47095015d5573c172d3f23bf663a4aeaf9fda43e91996005798c15158d2ba80e40ac553049c6f0c88a1e8cee3927ff1f8e6a53cb06390141f7e19672b57fd71c85cdfa3869fa2d08533485c45a4354b0286e62d87b6fe1564a5aec12362e4b62bba275df6cea63a0b2a408ffb4eb7b60dd36a12f9f8601807bf8f601fe2554f56e81937603940c1a266891eacfaa7be8fd", 0xde}, {&(0x7f0000003d40)="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", 0x1000}, {&(0x7f0000004d40)="3fc4977320aeff516bebfddeb8cdb43db02b7adb1b79a04cc026354b47e1860f182dfb6c47343fa04957cc60e99af31e79b76539446bc729b5e16235f36f20ab0d7a69790428378f2efb5ac7bb1ad41eb2e52d197211ed8bee18be20d53e478307dd07ffd57259ed33a4a390222692ae3601372e7543fa51ea34d95e0e21e8f0b400a3d903302de2b5a8a83a1484329d6a021dcc08cc56173401b0d3ea1b4deb102fd011c9896054ee11b48ad4a88cb9458b37f1cfc331e3f2ef0d4b01a9681838ccb9e38516806d1aaa79344ecae4f6987adc78a420d9d7", 0xd8}], 0x9, &(0x7f0000004f00)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r3, r1, r1, r0, r0]}, @rights={0x20, 0x1, 0x1, [r2, r1, r3]}, @rights={0x28, 0x1, 0x1, [r0, r1, r3, r0, r3]}], 0x88, 0x800}, {&(0x7f0000004fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000005040)="bd60d728995bbcaed1fa903fe223766903481bb4103ebc3ed04fca425a2ef3e0d8132f7f", 0x24}, {&(0x7f0000005080)="de590508e99a78589e276f82171e9529f320d59fb3b3adb7699c489d2c6007d94a392c49b5820cfb20d82c3518fc45139efefaac5f63b78b4a4d8ec529cee982f06c13b1a7c09fca97d9ab7fc2e97d22104d2310972a213770ace8be6fd121076ade8cf17988fbf0dd467e0b87c4051402bd665d859a245c4db38b5e8131697cc0a20f957252bdf7668d72255d8ccf2fe7a736ab8b944cc52fe19c0772d12b15be4fa6cffa9afcc3d3f1d0256193938067b8284803de5e0d872d8ef0d5237a1d9a0364", 0xc3}], 0x2, &(0x7f00000054c0)=[@cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x20, 0x1, 0x1, [r1, r1, r2, r1]}, @cred={0x20, 0x1, 0x2, r25, r26, r27}], 0x80, 0x4000}], 0x5, 0x8000) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:31:05 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\t,R\xb5\xc0\xb3\x00\xfc\xb9\x8b\x02\x00'}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.controllers\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000003c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000380)) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000240)={0x7, 0x4d, 0x2}, 0x7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="785141ed015f50738c12a32e37e2a35a4420f74440e0e8bc980000000029c486632400000000007500000000583b15c3f236cc7b4d920d7e5c24c42d0986ec16008000d1fc95e45cf0b6b66ddce1e30e"], 0x47) write$cgroup_type(r4, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r3, &(0x7f0000000000), 0xfffffea6) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 212.905988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.931875] binder: 8614:8616 BC_FREE_BUFFER u0000000000000000 no match [ 212.959327] binder: 8614:8616 Release 1 refcount change on invalid ref 1 ret -22 [ 212.988331] binder: 8614:8616 Release 1 refcount change on invalid ref 2 ret -22 15:31:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) ioctl(r1, 0x200, &(0x7f0000000040)="d11e1747eb9f5e844640923142389ca1eab111f5feff1c62319aa7c6983be01ef7b88ff813b31dd32392a5a408a10163") 15:31:05 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0xfffffffffffffd9c, 0x4010000000000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x57, 0x3ff, 0x3, {0x6, 0x974}, {0x8000, 0xfffffffffffffffe}, @const={0x90, {0xae96, 0x9af, 0xf0b1, 0x3ff}}}) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000000c0)=""/226) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 213.008740] binder: 8614:8616 ERROR: BC_REGISTER_LOOPER called without request [ 213.025031] binder: 8614:8616 BC_FREE_BUFFER u0000000000000000 no match [ 213.040640] binder: 8614:8616 got reply transaction with no transaction stack 15:31:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180), 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x2, 0x10, "5b2208cd8dc5801ca92385ae26ec05a1bd97179d3e5ea2fb05c755ed959d9a4d6daa00ad8f75f9584c98511f1dab44bd975170a4962da6c96a80ac30936453bf", "6ed4448078404c6cb3f88fd26a2e67608eb98d6450a6db944d0ccad2a90acb0a43fc420d5d31f3a5f55e3d9123e68f9492138e1b9250cc724a4f4988a3d547ce", "0ad8909feda578c6fecb8f6f7d7edf6bf74ff999787ec84034979605c13443b2", [0x80, 0x4]}) sendfile(r0, r2, 0x0, 0x7ffffff7) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) 15:31:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccaf030006000000000000000000380000000000000000000000100020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15:31:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x100, 0x0, @dev={0xfe, 0x80, [], 0x15}}}}, 0x961823580ff57869) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000306c000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 213.060109] binder: 8614:8616 transaction failed 29201/-71, size 0-8 line 3025 15:31:05 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:05 executing program 1: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:init_var_run_t:s0\x00', 0x24) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 15:31:05 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x12) pselect6(0xfffffffffffffcf9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040), 0x8}) [ 213.125013] binder: 8656:8661 ioctl c018620b 0 returned -14 [ 213.149354] binder: 8656:8661 BC_INCREFS_DONE u0000000000000000 no match 15:31:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x90) [ 213.179280] binder: 8656:8661 BC_ACQUIRE_DONE u0000000000000000 no match [ 213.201770] binder: 8656:8661 BC_FREE_BUFFER u0000000000000000 no match [ 213.209293] binder: 8656:8661 Release 1 refcount change on invalid ref 1 ret -22 [ 213.217861] binder: 8656:8661 Release 1 refcount change on invalid ref 2 ret -22 [ 213.226085] binder: 8656:8661 ERROR: BC_REGISTER_LOOPER called without request [ 213.236114] binder: 8656:8661 BC_FREE_BUFFER u0000000000000000 no match [ 213.246076] binder: 8656:8661 got reply transaction with no transaction stack 15:31:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="8c3e26521cb3cda1cecf00000000") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:31:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) accept$packet(r1, &(0x7f000000c580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c5c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c600)={{{@in=@multicast1, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f000000c700)=0xe8) getpeername$packet(r1, &(0x7f000000c740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000c780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000c800)={{{@in=@broadcast, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f000000c900)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000c940)={{{@in=@dev, @in6=@ipv4={[], [], @local}}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f000000ca40)=0xe8) 15:31:06 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f00000000c0)=0x0) io_destroy(r0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 213.275132] binder: 8656:8661 transaction failed 29201/-71, size 0-8 line 3025 [ 213.344411] binder: 8691:8694 BC_INCREFS_DONE u0000000000000000 no match [ 213.357188] binder: 8691:8694 BC_ACQUIRE_DONE u0000000000000000 no match [ 213.365739] binder: 8691:8694 BC_FREE_BUFFER u0000000000000000 no match [ 213.376731] binder: 8691:8694 Release 1 refcount change on invalid ref 1 ret -22 [ 213.390442] binder: 8691:8694 Release 1 refcount change on invalid ref 2 ret -22 [ 213.399786] binder: 8691:8694 ERROR: BC_REGISTER_LOOPER called without request [ 213.407859] binder: 8691:8694 BC_FREE_BUFFER u0000000000000000 no match [ 213.415014] binder: 8691:8694 got reply transaction with no transaction stack [ 213.422994] binder: 8691:8694 transaction failed 29201/-71, size 0-8 line 3025 15:31:06 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f00000000c0)=0x0) io_destroy(r0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) munlockall() setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:31:06 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:06 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) r1 = openat(r0, 0x0, 0x7fff, 0x7) write$binfmt_aout(r1, &(0x7f0000001440)={{0x1cc, 0x0, 0x1, 0xd5, 0x2c9, 0xfffffffffffffff8, 0x11a, 0x1}, "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", [[], [], [], [], [], [], []]}, 0x1720) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)=0x3) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000100)=0xc) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:06 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) accept$packet(r1, &(0x7f000000c580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c5c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c600)={{{@in=@multicast1, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f000000c700)=0xe8) getpeername$packet(r1, &(0x7f000000c740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000c780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000c800)={{{@in=@broadcast, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f000000c900)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000c940)={{{@in=@dev, @in6=@ipv4={[], [], @local}}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f000000ca40)=0xe8) 15:31:06 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001840)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/226, 0xe2}, {&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x3, &(0x7f00000002c0)=""/67, 0x43}, 0xda88}, {{&(0x7f0000000340)=@l2, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/26, 0x1a}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x6, &(0x7f0000001700)=""/155, 0x9b}, 0xf2}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/14, 0xe}, {&(0x7f0000001800)=""/39, 0x27}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/33, 0x21}, {&(0x7f00000018c0)=""/105, 0x69}, {&(0x7f0000001940)=""/73, 0x49}, {&(0x7f00000019c0)=""/16, 0x10}], 0x7, &(0x7f0000001a80)=""/200, 0xc8}, 0x7f}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001b80)=""/209, 0xd1}], 0x1, &(0x7f0000001cc0)=""/219, 0xdb}, 0x4}, {{&(0x7f0000001dc0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001e40)=""/132, 0x84}, {&(0x7f0000001f00)=""/147, 0x93}, {&(0x7f0000001fc0)=""/179, 0xb3}, {&(0x7f0000002080)=""/71, 0x47}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/177, 0xb1}], 0x6, &(0x7f0000003240)=""/4096, 0x1000}, 0x8}], 0x5, 0x20, 0x0) readahead(r0, 0x7, 0xffffffffffff0001) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038c8a7bc6c3a43040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050497ff6e0255c3eeeae73488978425c00000000000000000000000000000000000000000000d6d70000000000000000000000000000090a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:31:06 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:06 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:06 executing program 5: syncfs(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x84300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xffffffea) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ad61}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mprotect(&(0x7f000069f000/0x2000)=nil, 0x2000, 0x0) 15:31:06 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0xb6a2523b568435b8, 0x2, 0x6}}, 0x14) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x1) 15:31:06 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000007400040000000000000000000000000000000000000000f78c000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000d621850d56c0667621255020cc7e19475fe7c2fae3d8bc25a4e001b40ae2fab190ff84ed5273ce86bebe2bbdf9ac8ff95922375005000000711e"], 0x90) read(r0, &(0x7f0000000040)=""/146, 0x92) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) 15:31:06 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:06 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:06 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) accept$packet(r1, &(0x7f000000c580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c5c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c600)={{{@in=@multicast1, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f000000c700)=0xe8) getpeername$packet(r1, &(0x7f000000c740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000c780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000c800)={{{@in=@broadcast, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f000000c900)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000c940)={{{@in=@dev, @in6=@ipv4={[], [], @local}}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f000000ca40)=0xe8) 15:31:06 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:06 executing program 2: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:07 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x100, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x2, 0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000180)="a632bf762797ae51a4b2f85b5ae188cae84f0117cbdfc0572ea7f033719e438a388e5a1e46950f65f6aa80a3946625b61b898a", 0x33}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="897a54f3dfcf17a319125bfb2fdd6ac9f8963080", 0x14}, {&(0x7f0000001200)="e8fd9bb02fe4ec1f26a28660ca19e3dfb0fce95c030fb353d608623aa4997ff0695a921bcdab3d8342991e18853f5dbc22c3a4bfc6986ee032058640968834ccf2e4308981e43f1236c5312071c2dbc4fb09589435ae2519e9b78b77beecae9eff7d43a49a90b4238eaec85405aa98a184fdc40092e46537b4514e23d95eb517f47f560ee78ccadc2db316bbfe41d9d845a3dae182b4f05ddee18e19f3848ffa", 0xa0}, {&(0x7f0000001440)="856d9929538bf8e64015ea552bc3cddd51f3e15d75f9fcf96fa0ed7639255a2b1c37686245abb94e7283d65f66e742210e10c5c73535331dfe26601e241c7323ad0825c055caad507aa6b2d7b027a20a97b56bd5c9a1c0c6c0fb984d3c2caf674fccc561ae7341b7ef36bc473e8e2fd3cfd3e88474789dd262eb7e58712067f2c5b94e2d4e594a76edd6630e8f7e1ae3eeaede014b6a9887b3a257a8add7bd04f33fa2c3d295392c15af38465b6f409ffc67f126b233195496f810fd4f4a5eb848dfc342d47fe746105117362a5c5c7fe5e048c7b9816d01019331e52c69ab5a3f052727d5cdad513a72d6af75b21f8aff9b9f30f6b1a769c312468012638e057c4837b76a9bf84275e49658761e5a11d3dbebd16b93e3e457979e13bb101ab6e92dba8572829fcedcab689f7e8de8326eab6feb2e0f9cfbc6f2e9c05faf8b1ef94ea1ecdb523142404cdc58f5d27b183c0fc06f287f1ff077c8aff96630d4323975b66b6883887f99c4bc90b91dceaa4d13d1208396cefb952968b09785795a58c717dec37568fc2beff0ac1dc03c357df3ff9547419d572617989a8e7f2f6087bc155316d5e4ed7a92726e4cc6e91900231d0c8ccb2c6aac3825d92f580af0cfe153114d55ba791fb0dcf0ad4b33babb57931618dce122eaa9d1079f85ee784c911ecc0a529f868741f1ee07ef0e6a20d8740759da54ede7c3a7a2a15ae2a80ce3dbb266bbe2c8da86ed0b7b1cbc223a2b6d51a02227700062933457f361feab63900e5f195c38e901304097b9d41b48cd92f23ac4d1c3a83a618093fde4f71afa764b18e12558fa07ccc105028a6da0ae3efecabde14b36c5dbd7055acf0185d53913fb21656006611edabd340e26251bd22b64647df81f863bf5b51449eae1b57516cb3ce4417f6b89cf97daa7886b1d8e4d13f69267238c0d14c990e3e93ea2b3545ff49217fed8ee49c13089c716f392def5d69ba5e813dfae9bfb2d38e6c584cb80ce821ca1698064675f2cd9c4b765c78aea271d649e084d11153ef9740a85e2706353cef94eb86086b969dc262b936936a3d95328dee99ec5c5f401aac39b479d9306699d20090211e2f9df0ffe0a8ee57f1079c0eb833d55d9d40402fe6d41d0886837c11898be91b37346dff42b4990cc1b5ecb1be75ca9431314216ff468bfe8150c357fe9d732b388e393ba2a6cfcbf4be86a4187de24930706b5d865a99ac3ff5630cc1d51f5606ba2dd70a6a4a6df05bcf8a475daead8eaf753e0a045ae033259a48725b9839e46b79651a0a4266838aa33682be87e22f8a0d60c0a699f4539d3b300e403e745a91ff9fe12dcd37fe409e0add255799663c33ccc5efa627d553569a4a399cc69a67b4bb7e508614eca1746091917e9e1b985a0dc96283df2e6520d554b260d4d4abcec73a0cc240dbb7ae591e947e0b51af0993c7ea93e1b9053e59a4d3664afdef425c7d02813c9feb3a1c2f9395b1cd3c9c0630f57e3a0f930299ddc31898994905c9614861eb1ab53e1922037447f2cc0d8fdc0359b2f53a29fbc09ef4cb7ae34ec96774e4214d5fdcfdd218b31155b95c76e6c9128df87266f574d03fbe1b64232222906cbc13300b8c3017445565f16066d7f05be0317efbe28e50d93bef333c4e6d3db0a7fc7db940507b9b7679660b20c9cb9864bc033b2ff2a31eb0890994f150ad42680906f988ed7ea5db6462ff432110efd39e0ea6bfe87908987bc89de0ff7c25edf7674bba49a59ad15548831c1ceb144468f4a83cfd8b1f2906a25a32e2aa91ed05a0ade1b6914b7f137885fa0c800c1b625b953d4daab78697d30e32b1a747fdac07966c548e83292e7c4baaa9250f696e6a01c2226619988f59780252b9a410abe5ece32eaee46c783099ae27885e97280a4a199f3a6f1ad5c52eb6b66f7d875827b80895bceb441b958f788dd15e2487d731dd9e0336d2bf46b93d1fc521139584812f294a2ddcfe5b940a064f98f33f8f51851829228b89d3e0b31b70fd2d961e20aa6848e50a6d314a3b94e92c31f8cfd5a7edc396c404a291add799979d2342a743ade4fc4f30f4571b4bea59726d6c03bb5e0cc4ac959249f9bd7b8ed03f6d88fe0d87168747e0f6a7f55a5c691391afce15e1df7f3cdebd9d265f4197df0c3b2afb857d4eb314131ad98c9ef58a30d0ac31e515960103187717c9b7fa5c0066625295441db2db9fc42267cf2d50f291e0a5e1552d80d337ca0b2f49fc1ae2ca9363a1043520d9674164e688c285dcbb31a58f83b9184707d3aae9c93a4ec65358ae0d35b0b9ef68f6a14a51269c86815cebfbf7e9336de20c7b0f1dee1fc1f3517123c4f41f4b5cfa328dff20b6a82e6ef241e2c725f424f552682ab3a86da883889c6115578753bcc67533f257b009f1395d146ffdbbfaa1a0790a7991c5bda7c0a0d4ec8d61198866fa27801f8a382c13dda307b3541679abb8a66ca268f843d2a2523a9df5f911fa195bb04f2b50074ee6b305ba843f53d5a5f258d6ccd1f039a16858d5380f7758bec40d9b0a2c3dde0a45f648481563c81bf4a7fc73c9ce1ae7c08a08f0564987f7ad460902b04eeb6b3dbfe650cc9f404845c6849cbceb8630b2aa7603ef44a52f73a2e0b31fb82e72ca1ad77b1c59ec06d39e7323be71d2e0fe9731ae310453a7052b85e3f3a1035583dd93c8222a9de9380d3e22f2e5eb6f1526558f188b318a787c48118425c78abc445d875dafa3d6aeab16938b5d0dd6be6af7bfa24c7da10f52bde28737bde7a746ea863e0a2c340c8c2a0fc89fbe24a12ff57d247882fe9d9250c3a34bbaf7839433369e394d880dcd14a0b9616641ba9163475e1cc944abd5fbf3fe006cf53ddc0e8eb91492f736f1de7fd5b85033e1203704bfc44d01e7fb28ac64cfc3d0656d0b76e5d710f05be750425dca22ca5976fa9f63615e118e5214003f17cadf94562c42fa13b516d7dcb381f0cdd601e275a0ecf8c1f9aca16958246ac2cd65bfff8923a105a3e6c742bf2bee1b4d9bc17d3eea95f5d68b0c5ddf43dff056e8870faa5a1558de1ba1512bfc565636477346b9339c44826d0688ffd003a8c7309ca5f99d4913aa7b76835f12b4f7c6dbcfed2db4d8b2963ca93477d1c520dc919fc6a20f935d3636db5e19114b2544f3a86136437cdf548d6a9902bb6ca49ba61dd48de779af8790ecad544415146f7ffb92df8030d0c74cb8c465330fabb35918d095883cb084f3f844439487769cde1a8553624b7f99c6f98ea1d8711f156493deec21b6503d477b79b0d6543560a8cce2ce24ff4cd148706b71986e71a7c5d20ccb01191f19f47e30cb0c5401ca2d1a325c2564f42d00d7170803994fa49907acf9d040ce77ec0588262a24947425be953788ab09c467e4625ceb59bc25839209c5445e5e01cb2308c19911ead82772800ff093ad507b61ba53ec3b31b17407599775c2ec9cd8238b25bcbb99d989eb12b9e8e1fe432e2e67467ecad37a80e697683a0eb4c969db1c683643a811db28c164d303e7043b6261321cb24e8ac8d13c39586e0ac89c8aa8cc05915813a0dc63639672bb29f01d34cee869ec9f2bc4591a2d3fd4b765e7cf57f0801d7261b4109037d4ba518446a636cacc356e4424f50b917c77b39643239e7a782f43c684895c00aa495edae9cc3d54120f3ce43cf0296c5e4cd4ef05950c2b09d4c352573554292de253c5da7a34b91cc10707f928b11539f7eb53f2b586edcbe97395c93ea1b9948dd05fd72e249af9e874d992ba0c1d6fcbfa104f34a4bab57c867f0a8ca938a5bc7f901d3708f0b0ecca6c7d9ed30a0448c42848154c54aa1133a3f9a8469037bc893e317bbf808f88ff997974465afe85d50a60ed83249a187f3c0e2581fe2fe53fc5b7aa603826aa8098eac31b8a3bd202b59c9e5d9872f895fe0f8a6fc59ce077cf258a78cfae6898b046c600acba2d26a0836c4773d030b85f08e21df2efc61160aa5fa12d116caf0228561023850af13ce26fc771f0013916b55b487870c0f52e2f55df0b2f13d551ab1270d5b031da4b883e105278817f28771c805a4d15898da36ac81bd6bd2ddc32fccd90e9a2d65c0a1e0ebc3fb9af118d5c8afc84c3cee4e2a48df7fcd15e0774a5606809d1c54bc9980478c05a9131cc60df0b6a31047a8bc0dd032c6d32688bd59dc247cfa0edd0d8436d028b09d49ed9b437fe21599b3f5018d5a45eaa3b40f388876eafa89ec657a5d424f3aebe2eb10ce154b2fdc97ccdd8dce0bf9c1145d369d05c31a062de794372130ec1f328eac3bf278c4d646ff07a98da346c9d57a70032a239b89b5a5b47246987f283c2f0bee29afd4b5517d9eb12574ab19ef6712c2ca7b92fec7d0295e4c53347d7d39d39241a9936539e247c79c07ada1a42eea3a683396d8fc6eb5b706332b4a1c50ea8e380ea31e77047268a3f17bd33819139c03ef48b715cfb5b5829591ed1ecd324924b3b371d0230e8caf19e0dc41698fe0774485a0208812f062740a7e290d0a60aa168bcbf17f6fc1677fd3ede31f5dd3d584f100a0f87fbd6e7ffcf99adeffecba4ab858b580591602e0983030d5feeee3fe9855c40c63dd4cf17f46379f2ad2d053eff7fcceaf29fcc99dd41783ace7cbd4ed34d0e11789e59773ea6adef1c1f8ccbd1cd99d77a045eed7b4f91fbf4d7f7ebb49579ac4524aa0dd856459e3737ff3b67ea1709dbc6bd59117bf8095bad787007ac429afe752ad686cfb4787f5c01e78ee796ed3abc8f55cc22aaff1764f61d4ed2e1fbbcff625668e994b2a44096fb08831a4fbb09d90be30b77c5bb5300b78ab553c7caf6bae776c6259f842986406525d10e287cc4d86b47280cf6b9ad4c68197cc9b2d8dc3aa4b32f5f116ed869768957e78c4e19fc9242f511b6663c8ba434ed284964a7f725a5eac2501a52d1dcc364d7a3c28405cbf2866b70e87e7af79f9966c1c119cd1b106f885c73b1fece67f0dece2ab61d2f6908da6ab6feda8ac907c163c2fa5ddb99a2574638adb1b95f0ddb24a4fb8bdfca7c4ba163ef3db9a2a5dd447c9f68c21a194623e3095186e3e59281e97344492959ce1595e797ca2e41ccde00ba6c17402d04faa0606649747a1b77ef24c6f7cca32e58cb9db24a5d50da6f5dbb5158e51d7eae4ef14371aec36c848723def3b080a4f5567a5f9662de51741491cb8fb60c26b856504c1c928f3eda22417c766d3741bc3bd2b63cd23866e2eda01ca03ed461211142e390064df9337343b644f791d2f594a835f94d74b357ff80de9e67419df547406e73248c03b2787c553ab74714828f1eee5329beb03fcd2b92d7b8d5ab0dcc13a59809d08231b35f179121a95d9fc0cc1bf0d6e92fe4e57b5dffc049bee50c1fbb8992b003e7dbc0292c0d9f7f849e77cdcbc8e6f9a20c94bb257daa7b07460f64b911b8373d6286127bcf69f83463cc8eadd7ba2377410177b7c32bf6eb2ad4e7179719446caaaa97ad8f8afb71a7ff33b34795f2b9c156536d95abbf4de5876f7fe434daeece4b3690eae10246a62aa5e8fb5b08813e950c35395ec7ece481e249ad6cba18217da34787bf57d420c657f86f3d8da404f8c83c3ae5a6adce13519dc3cf632372437c4f4b3dfbc6272e81b68201fae8a5d9bc9fe9ba36139c9fb0c9038d3fcd30fb73ea063d0cf105fecb23c6ec570a6d6fe31b5046cb4e08df74043437d73cf49586ea0fb5cc64ab088bcf14c3835b0dee03dab080bacc683a32a558be756e0ed21da0e4d1f0152197c3f076cb09688fd2f5df06dfef99d77", 0x1000}, {&(0x7f00000012c0)="0908acc360260bdabe92b5375c106f452788", 0x12}, {&(0x7f0000001300)="fa122db57b66be6529af6aeb6785e3d5e30e0c09d86ade9f55fa02f587d1756f876315fe6c1242f59b892b122ba97a54d262dd9d15d232d23411225c179577e270d40aa2104f55ff7b199de9ddcf20482ee358ef7646dc48c5c109b7a4abad28d94f3648caa0834970fdc627aa56cd8cbe084e", 0x73}], 0x7, &(0x7f0000002440)=[{0x100, 0x109, 0x0, "39c616cb9dc3ab76aa03079ee86821c74cd6d208eaf9c9dec26139754f1545f0c8b29e63ce55351421b6db305c6794bd9e65052a2030710cf0c564c9b1ac4dd1145c5ce60d6dda79ea8921d0e07069ec432fb6c83765f74ae23701a1c0664fedd7074e282d73755900ae87c8a7d81e4e50dad162b526ea8b5c38e4fe0c057e7d8ea198356e6e7672b5900c4d4aa3d577ec0c2dc38f77738025361dfce9b6dc99b5df12a7f8292cd958ee260233058d7702483c0df6b6fabfd157189bad4c73c6062a3c844e8a32291ec52da6d0eebdd9092dcaaa25568c1de958943f2151e037c3aa15175e28f32bb93e339d"}, {0x30, 0x113, 0x8, "7784a5762553466c33c398630aeb733f9aaf041e3c98cecfc155487426f008"}, {0x88, 0x101, 0xfffffffffffffffb, "8a9f6bbf86b942e8035d380517d12d2024402d94e011619b94a7aab40b9cb6214161146094fc12a725cd015afce9d08595080f3ca36fe0c39452a9407f6acd04b541ca5a2a712ef3567370d49d9476062b776a1ef83dd3620c3d1d4d394eae1d8006de3e1796b4e2cca07b6271dc4fd6eb"}, {0xb8, 0x110, 0x1, "dd4583fb82b5b49714387055fb16aa7ac20552caa3fd73c42d31a94a42a818605bd798bc02bcd5f3b53a06942d0008e460204870ac99d2e1e8ce3a85e6439963edb5465561b7eb37e34611e4bcb5cd5344fcc40427c345cfb4ee823dc84825bc34ba6e72deddbab7b0b4f842dabb00b0b8a1cfcd9b3e95a13678dc1e4574acd16036d210b1409560eb85764507a26f7223968847448054e38fe205630108aa0c14ddb1c4f906"}, {0x40, 0x11d, 0xee57, "75299058a947b8b3188314b8e4460ad60a4babd4adff4fe68ac79cf092a9a13219db884ab453f34ff0"}, {0x88, 0x112, 0xfffffffffffff615, "2e51f419e76d79b4cd0c4c838530ff6e88a2a5a830692c0ebfad63334715aa63d63208885077bdb5ece7c6e56a604c9d689fdd4eab1c836ca1b77a04c2ec5aa51fa44357a02903afb60a5397a7566a61f1208a38ece36c26c6ed3b3a6b16573db0f89bd4a6b137591ccd4ec418fa72be8464e1ec"}], 0x338}, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x100, 0x0) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r2, &(0x7f0000000140), 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:07 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) setpriority(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)='/dev/loop-control\x00') unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) link(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) geteuid() ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x20001, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)=ANY=[@ANYRES32], 0x1) 15:31:07 executing program 2: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) accept$packet(r1, &(0x7f000000c580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c5c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c600)={{{@in=@multicast1, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f000000c700)=0xe8) getpeername$packet(r1, &(0x7f000000c740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000c780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000c800)={{{@in=@broadcast, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f000000c900)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000c940)={{{@in=@dev, @in6=@ipv4={[], [], @local}}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f000000ca40)=0xe8) 15:31:07 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0x3f, 0x5, 0x80000000, 0x0, 0x3f, 0x0, 0x278, 0x38, 0x262, 0x0, 0x912, 0x20, 0x2, 0x7, 0x1c, 0x10000}, [{0x7474e551, 0xf2a, 0x9, 0x7fff, 0x6, 0x8, 0xffffffffffffff2e, 0xfffffffffffffffe}], "97e6c5fb8130c773aa8b6516df44426c4283b81a439ac75b3291f72783f19d07afc58abecb5bf651be80b917e3a8e3f26fe0e5977882b08074ed62515ed48b5976e56d0015d4ec2ab34f5548759dd86ad76112105bb02742b2eb3433dcd281e6d9516ac8b99a0e5caff0a2f8569e11a0d08921f75b572f8293235623c2b9bfd4da30cb3b97f30991733994d59adb668351a1600ae852e0c7268fbd868647d5f251a61cf598b831443f0077490f2c", [[]]}, 0x206) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x190) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:31:07 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:07 executing program 2: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x40]}, 0x4}}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:07 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000580)=@deltclass={0x8d0, 0x29, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, r1, {0xb, 0xffff}, {0x2, 0x3}, {0xd, 0x7f57c8e04edad999}}, [@tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x884, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x5, 0xa7, 0xfc, 0x8000, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x40, 0x6, 0x6, 0x7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x1, 0x1, 0x3, 0x7, 0x3}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1f, 0x0, 0xe, 0x0, 0x100000000000, 0xffffffff, 0x1, 0xffffffff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x100000000, 0x3, 0x7, 0x101, 0x4, 0x10000, 0x29c, 0x2, 0x5, 0x8b7, 0x20, 0x0, 0x4, 0x1ff, 0xc0000000, 0x80000000, 0xc903, 0x8, 0xc5bd, 0x200, 0x9, 0xfffffffffffffff7, 0x7832, 0xfffffffffffffffa, 0x8, 0x4, 0x5, 0x8, 0x6, 0xcdf, 0x0, 0x8, 0x1f, 0x4, 0xffffffffffffffff, 0x8000, 0x5, 0x3ff, 0x3, 0xffffffffffffff5e, 0x101, 0x7, 0x8, 0x100, 0x8001, 0x1, 0xffff, 0x4, 0x0, 0x100, 0x3, 0x4, 0x0, 0x8, 0x8000, 0x1, 0xfffffffffffffff7, 0x7f, 0x8, 0x4, 0x8, 0x0, 0x81, 0x8, 0xb89, 0xffffffff, 0x6, 0x9, 0x100, 0xff, 0x17, 0xa25, 0x6, 0x3, 0x100000001, 0x9, 0xcb, 0x3, 0x8, 0x6, 0x401, 0x5, 0x5, 0x6, 0x1, 0x80000001, 0x3, 0x1, 0x5, 0x7fff, 0xc2, 0x0, 0x0, 0x7f, 0xfffffffffffffffb, 0x5, 0x7, 0x4d43, 0x1ff, 0x1, 0x2646, 0xf6, 0x5, 0x9, 0x0, 0x1f, 0x5, 0x3, 0x101, 0x6, 0x4, 0x8000, 0x9, 0x6, 0x8, 0x1, 0x100000001, 0x7a23, 0x6, 0x5, 0x0, 0xfffffffffffffbff, 0x6, 0x4f64, 0x4, 0xffff, 0x1000, 0x1000, 0x80000000, 0x6, 0x8, 0x0, 0x4, 0x3f, 0x80000001, 0x6, 0x9, 0x7, 0x9, 0x7fff, 0x9, 0x5, 0x8, 0x5, 0x0, 0x8, 0x0, 0x6a, 0x44b, 0x101, 0x20, 0x1f, 0x3f800000000000, 0x2, 0x98ae, 0x8, 0x0, 0x7, 0x7fff, 0x4, 0x7, 0x3, 0x7d, 0x400, 0x0, 0x264, 0xb2ff, 0x6, 0x9, 0x800, 0x6, 0x1, 0x7, 0xff, 0x3, 0x9e, 0x9, 0x101, 0x7fff, 0x80, 0xff, 0x8000, 0x1, 0x2, 0x4, 0x4aa, 0x2, 0x0, 0x8, 0x0, 0x8001, 0x0, 0x101, 0x6514, 0x8, 0x4, 0x9, 0x1f, 0x3, 0x7ff, 0xc3, 0xff, 0x3f, 0x4, 0x100000001, 0x0, 0xfffffffffffff143, 0x20, 0x4, 0x7f, 0x1, 0x101, 0x10000, 0x3, 0x800, 0x7f, 0x163, 0x5, 0xfffffffffffffe01, 0x400, 0x1, 0x2, 0x1, 0xbe, 0xcf, 0x4, 0x20, 0x4, 0xffffffff, 0x4, 0x4, 0x94c0, 0x4, 0x3, 0x3, 0x0, 0xaea, 0x5, 0x8, 0x9, 0x7, 0x1, 0x0, 0xfffffffffffffff8, 0x8, 0xfffffffffffffff9, 0x1, 0x3, 0xfffffffffffffffd, 0x20, 0x7ff, 0x5, 0x5934, 0x2, 0x4, 0x9]}, @TCA_CBQ_RATE={0x10, 0x5, {0xd51, 0x2, 0x100000000, 0x401, 0x0, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9bd, 0x5, 0x10001, 0x7, 0x200, 0x6a39, 0x101, 0x9fb, 0xf982c3e, 0x3ff, 0x3f, 0x101, 0x7, 0x3, 0x100000000, 0xf360, 0x20, 0x7fffffff, 0x3, 0x7fffffff, 0x7, 0xfdfb, 0xa0e, 0x101, 0x2, 0xffff, 0x0, 0x2000, 0x0, 0xff, 0x710, 0x8, 0x2, 0xa8ab, 0x4, 0x3ff, 0x0, 0x3, 0x2, 0x6, 0xffffffffffffabf2, 0x39d, 0x1ff, 0x34f, 0x0, 0xfff, 0x8, 0x7fd, 0x100, 0x40, 0x1, 0x1, 0x8100000000000, 0xcfd6, 0x9, 0x8, 0x8000, 0x6, 0x1, 0x5a, 0x40, 0x2, 0x4, 0x5, 0x0, 0x3, 0x1, 0x8000, 0x7fffffff, 0x4, 0x1f, 0xfff, 0x1, 0x5, 0x6f, 0x1, 0x4, 0x5, 0x81, 0xfff, 0xffff, 0x200, 0x5, 0xfffffffffffffff9, 0x9, 0x0, 0x2, 0x9, 0x6, 0x6, 0xfffffffffffffff7, 0x0, 0x3, 0x6213, 0x4, 0x5, 0x6, 0x0, 0x8, 0x6, 0x3f, 0x1c4e, 0x7ff, 0x1000, 0xfffffffffffffffb, 0x7fff, 0x2, 0x5, 0x1ff, 0x9, 0x9, 0x6000, 0x3, 0xfffffffffffffffd, 0x3, 0x400, 0xb7dc, 0x9823, 0x20, 0x398e, 0x5df, 0xbe4f, 0xffffffffffffffff, 0x8, 0x7fff, 0x3, 0x0, 0x6, 0x7, 0x1, 0x401, 0x400, 0x8, 0x3, 0x7ec2, 0x7, 0x1, 0x1, 0x5, 0x7fffffff, 0x3, 0xcb0, 0x3ff, 0x100, 0x8, 0x7, 0x4, 0x0, 0x0, 0x9, 0xfffffffffffffffb, 0x3f, 0x7ff, 0x10000, 0x4, 0x80, 0x1, 0x9, 0x5, 0x4, 0x8, 0xf6e, 0x5, 0x9, 0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x10000, 0x5f, 0x4, 0xac2, 0x8, 0x10000, 0x0, 0x800, 0x3c1, 0x688f, 0xfff, 0x101, 0x0, 0x4, 0x800, 0x1, 0x6af, 0x100000001, 0x7fff, 0x38, 0x4dc1e090, 0x0, 0x1, 0x3, 0x1, 0x401, 0xfffffffffffffff7, 0x0, 0x10000, 0x5, 0x0, 0x80000001, 0x9b3, 0x1, 0x40000000, 0x80000000, 0x0, 0x400, 0x4, 0x800, 0x81, 0x70b5, 0xa40c, 0x9, 0x100000000, 0x4, 0x0, 0x1, 0x5, 0x4, 0xfffffffffffffbff, 0x5, 0x1, 0x8f, 0x2, 0x1, 0x8000, 0x6, 0x6, 0x4, 0x9, 0x0, 0x1, 0x40, 0x0, 0x5, 0x7fffffff, 0x6b, 0x1, 0x5, 0x200, 0x5, 0x200000000, 0x2, 0x37d7, 0xed, 0x3, 0x2, 0x5, 0x3, 0xfffffffffffff71d, 0x8, 0x800, 0x0, 0x7fffffff, 0x6]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0xe}, 0x1, 0x100000001}}, @TCA_CBQ_RATE={0x10, 0x5, {0xec4, 0x1, 0x4, 0x8, 0x4db2, 0x2}}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8}}}, @TCA_RATE={0x8, 0x5, {0x6, 0x8}}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) 15:31:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) accept$packet(r1, &(0x7f000000c580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c5c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c600)={{{@in=@multicast1, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f000000c700)=0xe8) getpeername$packet(r1, &(0x7f000000c740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000c780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000c800)={{{@in=@broadcast, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f000000c900)=0xe8) 15:31:07 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mlock(&(0x7f0000bfd000/0x400000)=nil, 0x400000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x28) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) dup2(r0, r1) 15:31:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:31:07 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync_file_range(r0, 0x10000000005, 0x9e9, 0x7) sync() getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x40, 0x4}}, 0x14) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0xfffffffffffffffe, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000080)=0x2) r3 = dup3(r2, r2, 0x80000) ioctl$TCSBRKP(r3, 0x5425, 0x1ff) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000004) 15:31:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 215.027725] binder: 8835:8836 ioctl c0306201 0 returned -14 15:31:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r0, &(0x7f00000002c0)=@in={0x2, 0x0, @local}, 0x80) getpid() setresuid(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="69696c74657200000000000000000000000000000000e1452faf0000000000000000a598"], 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000011e, 0x0) 15:31:07 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/143, 0x8f}], 0x6, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 215.107476] binder: 8850:8853 ioctl c0306201 0 returned -14 15:31:07 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) accept$packet(r1, &(0x7f000000c580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c5c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c600)={{{@in=@multicast1, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f000000c700)=0xe8) getpeername$packet(r1, &(0x7f000000c740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000c780)=0x14) 15:31:07 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync_file_range(r0, 0x10000000005, 0x9e9, 0x7) sync() getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 215.186014] binder: 8860:8862 ioctl c0306201 0 returned -14 15:31:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:07 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x50200, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x5) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @broadcast, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x51008812}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c000000251016090010ca6f81fcf0f390000000f7acc8723e722976e722aab4c6dab89b6cc9d8ab95eafbe428d43bdc12c3fa3429e22bb0dc45d2eb87cccfb75db9f679a5122252f07e2dde01b782d83ead9e3a2b61adac", @ANYRES32=r2, @ANYBLOB="00000f0009000e00ffff050008000500ffc500000800050063090000380008001c0001000908018002000000020000000000000006000000080000001800020001000900080000d9b8009a062200000004000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8041) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000200)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "4fac4b334f4077a970981ac8453f103b"}, 0x11, 0x3) sync() pwritev(r5, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) 15:31:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:08 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/143, 0x8f}], 0x6, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:08 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000000140), 0x10000000000000c6, 0x4) sync() ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x4, 0xd35c, 0xbe74, 0xf91, 0x4, 0x2}) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)=0x1f) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r0, &(0x7f00000002c0)=@in={0x2, 0x0, @local}, 0x80) getpid() setresuid(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="69696c74657200000000000000000000000000000000e1452faf0000000000000000a598"], 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000011e, 0x0) 15:31:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) accept$packet(r1, &(0x7f000000c580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c5c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c600)={{{@in=@multicast1, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f000000c700)=0xe8) 15:31:08 executing program 4: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @multicast1}, 0x52, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10001, 0x80000000, 0x100000001}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x8, 0x4) 15:31:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper, @free_buffer], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:08 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x1) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RSTAT(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6a0000005a7c3dc805378db40001000000000400000007008dc3bcc67491225f136aa30d6cff0000000000000000800009000000fe0000461f86b0c090f89cad000000000e0070507030656d306e6f6465766c6f1a006b657972696e6765746831776c616e317365637572697479395b00000800656e7669726f6e000000d24141e8c7f77884d1b08e430b8eabaddd6ddd10f5d6c94cd32541cd56744d4d61791dfff5622e465c25cea0841294cbdf0ad704009bb0b2ab374bb4485fcc4de9eabcb60973873aea596acc5256297708832222450571c8474b15ddc3f04f55"], 0x6a) 15:31:08 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r0, &(0x7f00000002c0)=@in={0x2, 0x0, @local}, 0x80) getpid() setresuid(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="69696c74657200000000000000000000000000000000e1452faf0000000000000000a598"], 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000011e, 0x0) [ 215.703297] binder: 8911:8914 BC_INCREFS_DONE u0000000000000000 no match [ 215.728064] binder: 8911:8914 BC_ACQUIRE_DONE u0000000000000000 no match [ 215.742101] binder: 8911:8914 BC_FREE_BUFFER u0000000000000000 no match 15:31:08 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000000c0)=0x600000000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 215.756041] binder: 8911:8914 Release 1 refcount change on invalid ref 1 ret -22 [ 215.774298] binder: 8911:8914 Release 1 refcount change on invalid ref 2 ret -22 [ 215.784651] binder: 8911:8914 ERROR: BC_REGISTER_LOOPER called without request [ 215.802680] binder: 8911:8914 BC_FREE_BUFFER u0000000000000000 no match 15:31:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) accept$packet(r1, &(0x7f000000c580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000c5c0)=0x14) 15:31:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @register_looper], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:08 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000900)='e\xfbg\xfc\xef\xbdx\xe5\xdf\xd6\x87nviron\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000007c0)=0xe8) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffe1, 0x8, &(0x7f0000000580)=[{&(0x7f0000000140)="d54fe7014bb11f634ad0b93dd2820c93b485da6d650cbd33272c4e570ce04b9ebaef301ae042c05d08277baaeebe7ca32eb480ce896523c2543e73554776b9ee0ca125d08c39b560a222fc9b139cea3eee8e1593a08a59486ee035966acedff1bf863bb4afe51a4ce194a8b483ff1f3885daa0e78ac16af1cd7749de2b4953e9b97b71fd90ea61bd4744cff5b3490b1174603158958a9b8aec1a4510b10e156fff956dd58e46", 0xa6, 0x7}, {&(0x7f0000000200)="baf8fb1b41d29895e4e79af197e698dae33644c6a67f252b9b540647ad38d00161d2621f21c4e0", 0x27, 0x1}, {&(0x7f0000000240)="07711527be81320da5acb11cd5567b72b4fb0ce2f01458f2ac7b768b5015739e7ee25c60ecc4a418a0d35d9d379982a35c6bde6cd829917e1267fc352670b70e36718714ed800c30839e2aa26044307c793d40e9d33ea69290fac15583a3af6013bc9efb2d04e2bd", 0x68, 0x3}, {&(0x7f00000002c0)="968c6af6d262c2ec9be771c3a685625c1b40fb091644b7ae478e65cebd4c95d712eb525608b66b0b1e33681d4d72601d867f9546daa4ff53c1a1cf628961695149fa6d6e55e1946759dedba1e037879317f537819f7f5fc1c2aa76957ffdb833766bdf52922804ca7578ad14209211487b0a85db0258c8692abc544ced5a222b813f02a7368d6e3eae03484ee159770ff583e6de24c2b275c6fc", 0x9a, 0x5}, {&(0x7f0000001440)="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", 0x1000, 0x1}, {&(0x7f0000000380)="8c8f5facfec28694a23b19499f8c8d925d233bf2fbb0d86b3add2ded5590a1f8806fdedd1fac02eb144caacf8349356c37d1f19325485fac0709321b2571746c63de75759cf85e6b9ee60f1497766b9a14a03daf07817547aa00ac6baae0dabc646b5be62b785d211dd66c0079a52cb2ff42aa9373618589ffa5f60917", 0x7d, 0x5}, {&(0x7f0000000400)="ed8b959f445ac322e6807ef54c71e4e44ca2627b3ac40606377a2caa72aad638bfc7db9625c838f4cfd146b45f5262f1e71a12b26cd0a62d1dcd6b51deb67ee1af289d4598e323d70c7e352218254f30e8fbd9f185b12e45a13a3ed5dc18485ff14ab3f8b4cef3fbdba4c1d72383bbfe88a18541d777b1b84fc802c287fee68aebaf7295e6b90676088a2aeed7c578edaf7da3aa98462d5b48950a7751aedf6e0e9c95d1f36684d26a2c510db1fc3004cd4bac082727755b8ca871a6641b09e6b24c7d02437b3c26788b3162dadd6502d563a2be1a98f89bd27c3569ca9b908cbc", 0xe1, 0xb9b}, {&(0x7f0000000500)="56946d4d615968262062a649828bf0370ff1366c4042e6f7da", 0x19}], 0x20404b0, &(0x7f0000000800)={[{@fat=@quiet='quiet'}, {@nodots='nodots'}, {@fat=@showexec='showexec'}, {@nodots='nodots'}], [{@subj_user={'subj_user', 0x3d, 'environ\x00'}}, {@uid_lt={'uid<', r2}}, {@obj_type={'obj_type', 0x3d, 'environ\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'ppp0systemwlan0mime_type'}}, {@fowner_lt={'fowner<', r3}}]}) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 215.903294] binder: 8937:8940 BC_INCREFS_DONE u0000000000000000 no match [ 215.922151] binder: 8937:8940 BC_ACQUIRE_DONE u0000000000000000 no match [ 215.933565] binder: 8937:8940 BC_FREE_BUFFER u0000000000000000 no match [ 215.948876] binder: 8937:8940 Release 1 refcount change on invalid ref 1 ret -22 15:31:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 215.977535] binder: 8937:8940 Release 1 refcount change on invalid ref 2 ret -22 [ 215.998296] binder: 8937:8940 ERROR: BC_REGISTER_LOOPER called without request [ 216.128494] binder: 8958:8960 BC_INCREFS_DONE u0000000000000000 no match [ 216.159792] binder: 8958:8960 BC_ACQUIRE_DONE u0000000000000000 no match [ 216.187415] binder: 8958:8960 BC_FREE_BUFFER u0000000000000000 no match [ 216.197133] binder: 8958:8960 Release 1 refcount change on invalid ref 1 ret -22 [ 216.213710] binder: 8958:8960 Release 1 refcount change on invalid ref 2 ret -22 15:31:09 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x1) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RSTAT(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6a0000005a7c3dc805378db40001000000000400000007008dc3bcc67491225f136aa30d6cff0000000000000000800009000000fe0000461f86b0c090f89cad000000000e0070507030656d306e6f6465766c6f1a006b657972696e6765746831776c616e317365637572697479395b00000800656e7669726f6e000000d24141e8c7f77884d1b08e430b8eabaddd6ddd10f5d6c94cd32541cd56744d4d61791dfff5622e465c25cea0841294cbdf0ad704009bb0b2ab374bb4485fcc4de9eabcb60973873aea596acc5256297708832222450571c8474b15ddc3f04f55"], 0x6a) 15:31:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) getpeername$packet(r1, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000a480)=0x14) 15:31:09 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:09 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000100)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer, @release={0x40046306, 0x1}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:09 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000000140), 0x10000000000000c6, 0x4) sync() ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x4, 0xd35c, 0xbe74, 0xf91, 0x4, 0x2}) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)=0x1f) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:09 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x10020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='dax\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 216.381610] binder: 8967:8973 BC_INCREFS_DONE u0000000000000000 no match [ 216.389904] binder: 8967:8973 BC_ACQUIRE_DONE u0000000000000000 no match [ 216.403133] binder: 8967:8973 BC_FREE_BUFFER u0000000000000000 no match [ 216.422997] binder: 8967:8973 Release 1 refcount change on invalid ref 1 ret -22 15:31:09 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x232, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xd) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x10e6}, {&(0x7f0000000240)=""/147, 0x6a6}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x2, &(0x7f0000002e40)={0x77359400}) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00') sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004200050101000000000000008a02bd5f15df04ffbd361ac2b3a93eb229adc12df1056e8a1a3f3d8e097151500f5686334fe65a34aec53b1b3ea148f8c53a154ce22718a4118a041eaf07e923877f655bab3c406f521c0b6fc6eabec993737c39cfb1d89b04e185ac3d8f39cc659d09f8aeaeac25105e8f707bcc5959878d26af8b6fd4dc109b8b235c0874339408ba22feac3c41444dceb3d2d3b30be6c36ffc1608b15b8277"], 0x14}}, 0x0) 15:31:09 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/45, 0x2d) 15:31:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x34, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}, @free_buffer], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:09 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) ftruncate(r0, 0x8000) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x0) ftruncate(r1, 0x98e6) [ 216.516978] binder: 8990:8994 BC_INCREFS_DONE u0000000000000000 no match [ 216.537227] binder: 8990:8994 BC_ACQUIRE_DONE u0000000000000000 no match 15:31:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) getpeername$packet(r1, &(0x7f000000a3c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a400)=0x14) 15:31:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) [ 216.574571] binder: 8990:8994 BC_FREE_BUFFER u0000000000000000 no match 15:31:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 216.676741] binder: 9013:9016 BC_INCREFS_DONE u0000000000000000 no match [ 216.684914] binder: 9013:9016 BC_ACQUIRE_DONE u0000000000000000 no match 15:31:09 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0x1, &(0x7f0000000180)='\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x8, 0x7fffffff, 0x4, 0x100000001, 0x0, 0x84, 0x2811, 0x1, 0x9, 0x9, 0x3, 0x81, 0x3, 0x454, 0x4, 0x100, 0x6, 0xfff, 0x2, 0x8, 0x80, 0x8001, 0x200, 0x7, 0x6fb, 0x9, 0x10000, 0x800, 0x9, 0x9, 0x100000000, 0x3, 0x9, 0x1ff, 0x1ff, 0x80000001, 0x0, 0xd411, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10, 0x100000001, 0x400, 0x0, 0x9, 0xfffffffffffffff7, 0x3}, r2, 0x3, 0xffffffffffffffff, 0x3) sync() pwritev(r1, &(0x7f0000000540)=[{0x0, 0xfffffffffffffe03}, {0x0, 0x138}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x1, 0x2}, {0x5, 0x4}], r1}, 0x18, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffcc2, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 15:31:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:09 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:09 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0xff, @local, 0x7}, {0xa, 0x4e21, 0x100, @local, 0x4}, 0x7, [0x43, 0x80000001, 0x4, 0x0, 0x9, 0x2c8000000, 0x5, 0x80000000]}, 0x5c) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) poll(&(0x7f0000000000)=[{r0, 0x2000}, {r2, 0x2}, {r2, 0x280}, {r2, 0x40}], 0x4, 0x1) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x5}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@remote}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e20, 0x5ddc, @loopback, 0x111d3c5a}, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x4, [0xfffffffffffffffd, 0x2, 0x7, 0xfffffffffffffffd, 0x3, 0x2, 0x200, 0xb49]}, 0x5c) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 15:31:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) getsockname$packet(r1, &(0x7f000000a340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a380)=0x14) 15:31:09 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 217.217124] audit: type=1400 audit(1553614269.919:52): avc: denied { setattr } for pid=9027 comm="syz-executor.4" name="NETLINK" dev="sockfs" ino=23148 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 217.242508] binder: 9028:9034 BC_INCREFS_DONE u0000000000000000 no match 15:31:09 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffffd) futex(&(0x7f000000cffc), 0x4, 0x2, 0x0, &(0x7f0000000000), 0x0) r0 = dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {r1, r2+10000000}}, &(0x7f0000000100)) 15:31:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @acquire_done={0x40106309, 0x0, 0x1}], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) 15:31:10 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 217.265775] binder: 9028:9034 BC_ACQUIRE_DONE u0000000000000000 no match 15:31:10 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/62, 0x3e}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x4}, @free_buffer], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 217.328108] binder: 9052:9056 BC_INCREFS_DONE u0000000000000000 no match [ 217.355681] binder: 9052:9056 BC_ACQUIRE_DONE u0000000000000000 no match 15:31:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) getsockname$packet(r1, &(0x7f000000a200), &(0x7f000000a240)=0x14) 15:31:10 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={&(0x7f0000000200)=""/109, 0x6d}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(0xffffffffffffffff, &(0x7f0000000540), 0x134, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x6b, 0x0, &(0x7f0000000240)="0e66396b66c748262cb3c4a0aa398dfda2e256cf41c0994f9d8c6e13f107d8248e73b96e999938ce960338c0c14e0f71aef59e48fc1e65635d9d4735a187e77a9b432a48665d537dd0fd90b36e4a7b84a812f655b749971e32f1b6030542cd45bc7d49d4855b84378cfd55"}) [ 217.407901] binder: 9068:9071 BC_INCREFS_DONE u0000000000000000 no match [ 217.421145] binder: 9068:9071 BC_FREE_BUFFER u0000000000000000 no match [ 217.473664] binder: 9078:9083 BC_FREE_BUFFER u0000000000000000 no match 15:31:10 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 218.062586] binder: 9099:9101 BC_FREE_BUFFER u0000000000000000 no match 15:31:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x600081) bind(r1, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = dup2(r1, r1) write$tun(r2, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0xff0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) 15:31:10 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) r1 = openat(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x2, 0x4e24, @multicast2}, 0xed, 0x0, 0x0, 0x0, 0xb31, 0x0, 0x400, 0x6fae, 0xffff}) prctl$PR_GET_KEEPCAPS(0x7) mlock2(&(0x7f00002d6000/0x3000)=nil, 0x3000, 0x1) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/62, 0x3e}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a180)={'team0\x00'}) 15:31:10 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='/dev/binder#\x00') r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', r1}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 15:31:10 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 15:31:10 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) fcntl$addseals(r0, 0x409, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001600)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000100), 0xfffffffffffffdbd}], 0x1, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0) sendfile(r0, r2, 0x0, 0x102002700) 15:31:10 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xffffffffffffffff) sync() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)=ANY=[@ANYBLOB="010041005a4087108a97db6f7fdf01441666e4eabbede6bbdae713de67570f889851ef045789082f9f6d868302778d796fe3d56df9c4ca5102dbfe3bfc95362eb3e9224305"]) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0x10000, 0x10}, 0xc) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 15:31:10 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 218.231984] binder: 9128:9130 unknown command 141492224 [ 218.244304] binder: 9128:9130 ioctl c0306201 200002c0 returned -22 15:31:11 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x400000000400008, 0x7fff}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x28}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000540)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000001f00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001f80)=0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000020c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000021c0)={@remote, 0x0}, &(0x7f0000002200)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002240)={'bridge_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000002380)=0xe8) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{}, {0x20, 'priority\x00'}, {}, {}, {0x20, 'user_linkup_enabled\x00'}], 0xa, "f7986c228f6593e562aa8aef819395633ac66295"}, 0x41) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000580)={0x7, 0x10001, 0x482, 0x0, 0x13}) accept$packet(r1, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002400)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000003f00)={@initdev, @dev, 0x0}, &(0x7f0000003f40)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003f80)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000004080)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000004180)={@multicast1, @rand_addr, 0x0}, &(0x7f00000041c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000004200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004240)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000004280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000042c0)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000049c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004980)={&(0x7f0000004300)={0x664, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r3}, {0xf0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x10c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xe8, 0x9, 0x400, 0x3ff}, {0x7, 0x0, 0x9, 0x1f}, {0x97bc, 0x20, 0xe8, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f5}}}]}}, {{0x8, 0x1, r10}, {0x250, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9e5d48c}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff0f2}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x6, 0xfc2}, {0x5, 0x5, 0x8000, 0x7}, {0x6, 0xffff, 0x70, 0x7}, {0x7fff, 0x8001, 0x9, 0x2c0000}, {0x0, 0x1, 0x2ab8bbc7, 0x3}, {0xfffffffffffffffc, 0x1, 0x2e8000000000, 0x4}, {0x6, 0x0, 0x7fff, 0x2e06}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x58, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x1, 0x400, 0xffffffffffff7fff, 0x800}, {0x8, 0x3, 0x1ff, 0x4}, {0x9, 0x8001, 0x10000000000, 0x401}, {0x4, 0x0, 0x5, 0x7}]}}}]}}, {{0x8, 0x1, r16}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0x664}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 15:31:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x9, 0x6, 0x7}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03430840ad20c6238f26bccdbba7303df3dfa9da43eef684cd988cc55979c5f2c7390ece193a9b9d5a37b81d31a632a83735", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 15:31:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000a100)={@rand_addr, @initdev}, &(0x7f000000a140)=0xc) 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x8) ftruncate(r1, 0x208200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x147) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x1, 0x70, 0x4, 0x400, 0x3, 0xe77, 0x0, 0x96, 0x59042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f00000002c0)) ioctl$TIOCGSID(r3, 0x5429, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r6 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) setresuid(0xffffffffffffffff, 0xfffe, r7) fchown(r5, 0x0, 0x0) geteuid() openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000200)=r6) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x8807fc) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) 15:31:11 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0xfffffffffffffc9c, 0xfffffffffffffff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 218.341721] binder: 9147:9153 unknown command 1074283267 [ 218.376058] binder: 9147:9153 ioctl c0306201 200002c0 returned -22 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2=0xff010000, @in6=@local}, {}, {}, 0x0, 0x8}}}, 0xc0}, 0x8}, 0x0) r1 = accept(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40010002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="841024e3b7abc7dafcffe0864b0325077428ca5ce7", @ANYRES16=r2, @ANYBLOB="02002dbd7000fcdbdf25030000006c00050008000100696200000800010065746800080001007564700008000100657468003400020008000100000000000800010009000000080003008000000008000300000800000800040001000000080002000700000008000100756470000c00020008000400ed0000001c00070008000200ff0100000800020001000000080002000180000048000600080001000600000008000100ffffff7f04000200080001000600000008000100040000000400020008000100000800000800010000000000080001000600000004000200"], 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x40) [ 218.402066] binder: 9147:9166 unknown command 1074283267 [ 218.418523] binder: 9147:9166 ioctl c0306201 200002c0 returned -22 15:31:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x230800, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x87, 0x3, 0x2}, 0x80000001}}, 0x18) 15:31:11 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x6, {0x95f2, 0x7cb, 0x6, 0x80, 0x3, 0xd270}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x3, 0xfff, 0x3, 0x6}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0xfffffffffffffc9c, 0xfffffffffffffff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009fc0)={{{@in6, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f000000a0c0)=0xe8) [ 218.495813] binder: 9180:9186 BC_FREE_BUFFER u0000000000000000 no match 15:31:11 executing program 4: r0 = memfd_create(&(0x7f0000000080)='system_u:object_r:wtmp_t:s0', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0xff69, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x3, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0xfffffffffffffe05) 15:31:11 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000240)=""/113, 0x20000207}], 0x1, 0x0) sync() r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6c88]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1c00, 0x1, 0xfffffffffffffffe]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x19c, 0x40]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630841", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='coredump_filter\x00') ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/237) [ 218.545238] binder: 9180:9186 BC_FREE_BUFFER u0000000000000000 no match [ 218.566192] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 218.609384] audit: type=1400 audit(1553614271.309:53): avc: denied { associate } for pid=9197 comm="syz-executor.4" name="memfd:system_u:object_r:wtmp_t:s0" dev="tmpfs" ino=24192 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 15:31:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4000000, 0xc}) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000000)="a7120f83bef11c8f4ddf8bba4697e10a4953817513e05adf28d7019fcbf1da730b87db1be22a3cad7b7a11ab4a3ae27ab3fb1900dd508189ce2ed7") ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) ptrace$cont(0x20, r1, 0x0, 0x0) 15:31:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0f010129b2000000000000000000"]}) [ 218.654456] binder: 9207:9214 unknown command 1091068675 15:31:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) getpeername$packet(r1, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f80)=0x14) 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 218.685820] binder: 9207:9214 ioctl c0306201 200002c0 returned -22 [ 218.724598] binder: 9207:9214 unknown command 1091068675 15:31:11 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000240)=""/113, 0x20000207}], 0x1, 0x0) sync() r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6c88]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1c00, 0x1, 0xfffffffffffffffe]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x19c, 0x40]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = dup2(r0, r0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0xff, 0x101, 0x9}) [ 218.740157] binder: 9207:9214 ioctl c0306201 200002c0 returned -22 15:31:11 executing program 1: openat(0xffffffffffffffff, 0x0, 0x100, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{0x0}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00'}) 15:31:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1dc, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffff7fff}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffffffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x19}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb87, @local, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000, @empty, 0x9}}}}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x3}, 0x40}, 0x1c) 15:31:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000005e40)=[{{&(0x7f0000000000)=@in, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/135, 0x87}, {&(0x7f00000001c0)=""/232, 0xe8}], 0x2, &(0x7f00000002c0)=""/106, 0x6a}, 0x9}, {{&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f00000016c0)=""/56, 0x38}], 0x7, &(0x7f0000001780)=""/162, 0xa2}, 0x5}, {{&(0x7f0000001840)=@generic, 0x80, &(0x7f0000001a40)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/41, 0x29}, {&(0x7f0000001900)=""/33, 0x21}, {&(0x7f0000001940)=""/82, 0x52}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/125, 0x7d}], 0x6, &(0x7f0000001ac0)=""/129, 0x81}, 0x9}, {{&(0x7f0000001b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005280)=[{&(0x7f0000001c00)=""/40, 0x28}, {&(0x7f0000001c40)=""/248, 0xf8}, {&(0x7f0000001d40)=""/208, 0xd0}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/177, 0xb1}, {&(0x7f0000001f00)=""/70, 0x46}, {&(0x7f0000005000)=""/192, 0xc0}, {&(0x7f00000050c0)=""/141, 0x8d}, {&(0x7f0000005180)=""/249, 0xf9}], 0x9, &(0x7f0000001f80)=""/61, 0x3d}, 0x9}, {{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f0000005340)=""/204, 0xcc}, {&(0x7f0000005440)=""/131, 0x83}, {&(0x7f0000005500)}, {&(0x7f0000005540)=""/244, 0xf4}, {&(0x7f0000005640)=""/171, 0xab}, {&(0x7f0000005700)=""/94, 0x5e}, {&(0x7f0000005780)=""/138, 0x8a}, {&(0x7f0000005840)=""/40, 0x28}], 0x8, &(0x7f0000005900)=""/101, 0x65}, 0x3}, {{&(0x7f0000005980)=@nfc, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005a00)=""/77, 0x4d}, {&(0x7f0000005a80)=""/181, 0xb5}], 0x2, &(0x7f0000005b80)=""/69, 0x45}, 0x9}, {{&(0x7f0000005c00)=@rc, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005c80)=""/199, 0xc7}, {&(0x7f0000005d80)=""/72, 0x48}], 0x2}, 0x7}], 0x7, 0x2001, &(0x7f0000006000)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000006180)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000006140)={&(0x7f00000061c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100c2dbd7000fedbdf250100000008000509000000080004a7cce49f66fc0749000600000028000600dd200000080005000200000008000500ffff000000e8"], 0x44}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000001ffc)=0x6, 0x4) dup3(r0, r3, 0x0) 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{0x0}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 218.825727] binder: 9249:9253 BC_FREE_BUFFER u0000000000000000 no match [ 218.856120] binder: 9249:9253 ioctl 4b46 20000000 returned -22 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{0x0}], 0x1, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 218.911868] binder: 9249:9253 BC_FREE_BUFFER u0000000000000000 no match 15:31:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b66f0ba04b4883db4def77", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 15:31:11 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) iopl(0x72) tkill(r0, 0x9) 15:31:11 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005b00)={'ip6gretap0\x00'}) 15:31:11 executing program 5: syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ftruncate(r0, 0x4) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x12, 0x1) 15:31:11 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8000080) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') preadv(r1, &(0x7f0000000000), 0x0, 0xa0b) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 15:31:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x19}, 0x101, 0x1, 0x2, 0x4, 0x1, 0x9}, 0x20) [ 219.004452] binder: 9287:9292 unknown command -1609863242 [ 219.028188] binder: 9287:9292 ioctl c0306201 200002c0 returned -22 15:31:11 executing program 5: syncfs(0xffffffffffffffff) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x84300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x6, 0x6, 0x1000, 0x2, 0x0, 0x7, 0x1020, 0x4, 0x3ff, 0xa01, 0x0, 0x0, 0x4, 0x7fffffff, 0x0, 0xffffffffffff406b, 0x8, 0x1, 0x2, 0x3, 0x7, 0x4, 0xffffffffffffffff, 0x8, 0x10001, 0xff, 0x3088a9c9, 0x979e, 0x138c0000000, 0x40, 0x9, 0x2, 0x0, 0x5, 0x8000, 0x8a, 0x0, 0xfc8, 0x4, @perf_config_ext={0x0, 0x4}, 0x2000, 0x2, 0x8, 0x6, 0xefb, 0x1, 0xffffffff7fffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write(r4, &(0x7f00000001c0), 0xffffffea) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ad61}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x7b865a07d3eab715}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 15:31:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020400100a0000000000000000000000030006000000000002000000e000000100000000000000000200010000000000000000000000000003000500000000000200000069bfc815c11a30640a909d9786317ce00000010000000000000000"], 0x50}}, 0x0) 15:31:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="54050000000000c98e00001e3c63fc20ddd136ae95a01d757616ea41c5186a388d284d3014a38a96e192648541ac7317a924998cef11b745b067b10575e56fd0079b878df46b9c2c5832141a07b351a32577db1b6ec040a8e64108ed629c4efb59a94fcc52b64f84ffb84e53325b59fdd08c4c81e1030000000000000054d5be658af05a6eba961dd74361b380ef541839354faa452bb003e54f433baf693e26807fba1b8ae45faeb348fa1617ba8b2892f680a0cf8d4a0c1c2a55f8941f36136168e137f652", @ANYRES64=0x0], 0x0, 0x0, 0x0}) fcntl$setsig(r0, 0xa, 0x2) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80000) r2 = dup2(r1, r0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 15:31:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000005a00)=0xe8) 15:31:11 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getuid() syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x10000, 0x6, &(0x7f0000000480)=[{&(0x7f0000000200)="85833e63f5ed1b058c20acb5c50ed9dec3ccc77bd296ea14e3208fa234acc432a98b021c98941b25ad5fbc208ec63de5647adba26ebc75274fdc0011b9db24ba56a888219883abdbbf5d3f413611c96b2a1efda7b72383abab31cce1b45d38f4618889ec3ebb26e50eac94071a84deaa75f7510d785525430ccf089fba989ac31f703749b421c98bb8604935cc956e7554b2390791a1731e930f9d9e63ccc67c58152cd9e96cb244269ec7ff49bf3cf1b6f5e1cd6ffc229b7998d9fcd1afffbecc6fedfb2ead38a4f666bb7d3f9f6cd7dc9557d0656a9608e9b1980a2e85b9ad", 0xe0, 0x7}, {&(0x7f0000000300)="74244e96a9cfdaa1cc7514b22e0869da20b5c883fa3b1c4e3424d82ea4479e414b4a5ea1e369c7", 0x27, 0x4}, {&(0x7f0000000340)="e3461fe0cb1ae19462226d7a298e2341fe8c7c1c384c1fcaa35b0d0dff5eda5beb8c6b0693630dd8c834a40a36ad2e08f345c2a0604cc1e6940a1eef8bfe08b51a9454d7a1b36a44a7dbd16754eeb99290090e031fb28f83a31e5fdfb77722dbd1783805ac74164d9d17e66abb1d6faaa8cc21bb7f510725da8b35ea852e96aa8b66a4dfc9dd81383a50112d", 0x8c, 0x6}, {&(0x7f0000001440)="ac28eaddc725ceaaf0e8f45e95855d55b2b1b984615997de5ac47aae072f40c73da532d52ef2e128e64e7837957704cf25bc473a1c877db5e2d9dd7542b84993b2470a85d2d8abfd179390bab364358d201467259a7f14729e9a0585c0f2c3a8caf5d272aba52028cd64d26af349fb6024683ad5e3f15bcda92d72561a8fb9b2032361239e0bb9a254269ea5024528e2e7b87fd47d3738dfd9d3fd0b7f89b44da192dffef89108541d8405862beba0a831c957e6d4ab7590a22eeff3f5d01f2074835778791d869e9d2fd0c14f7ca5ed2f93c1e63b48d5c7ebe2d30fb6f7f62597c1cc02dd8b837c61465e8c2c20cf1cfebc900ae34994e2dd73a6c619566626021e0a139202a57a2f2bc58656d901269c79099e3aff192f337ad5331abc6a6b0147b9d30940030dd5abd1f3042d724d964645ec6dc8b600991d982d585e02bd2f6ff113d08afdd1681be16e16b6d7dda350e66d5299550312436d792765a85b2be813b0e4d670cb677f677582e38e3d41a3f2a322aa63ec97bb6000182beef1c7dfe57a754fc9386201fdd8c1b097a2649b2e8fa957b9f263f4ba26ef29b94c317d624fae1e03aef48b02057459aa6a15258d1b1b47c62d2d4c284c246c37ea07d3acc1ae54ee1e159cfd7bd63bf000ec8f65ebdb9b8b00c82b5212bfdcf8c1267cb28b899655e2c749bc2efb4263fcb9fbcfa5cb122f8db20e74668071e3707c4a7e779eee68846ddb7b5ce1adaa3dc7b5894fbb6ed30dcf1ee4581660e805464e088d42595ff8e7aa9cb10493f47018765e077120276ec8f31b7c9bd04f2ecce74e6ac7f9fea086c8b342b8bf03e1870cf02a4d209c2af0364f37c4912184068d2dad92204345ec07a202ff85ba5b0ce56d750a7cb5ca8fe22d6fa4c2aacbe27478209603d3493b0ff3f5771cfa13ae0e1a0201f204ab113f763f910b444aea6e2100685454d186f4af6e8b24b7da6198a3fccec390a248fa10c2f83702745fe79838c03b6f9391ffb71b961fcc5b5242a990b20922984c88f2170a90eef3244db303f7953ee02666d15457e8bfe07aa65030c3c2762eb6c5543bb8af8f058f99fac836d3674d11b7949f51201a1439d4315322147e0bb25ccf712d00ce1fc11e2e036c410c713ca0df34d4bc4e1798073443d617214adababa52a8fab88c32e5793b92f59c88b42680479d6bec4dea5df232b45bdbdc142d8ecc981fe505009220832df39bcc56b6bca511c6b8bdfd102c68adac5076bfc13abdbf6af0bca3c5b876b50e898b7661d5329d170f41122860e6e94c036c67d33c4c547ada2a82a021ea8dffc46cc7f3ad8df669e9e79bd0dc7399bd576715f36dd7d3337fe3c2754987d33f8ef821b06f92a587744318518bbae32428064ff100cf478411933b38bc1edf7c4284994a60b4c8a232538f52dd5c5ab188a2d5e18cc07e1035f05edcf5fe4ec7716bb9b9cbc9946219a52a1cb4150ffc0195993a04b90b880b22e8e695dfa7113393a7b0d8a6ad1e01bbae27090a9ff841d49d8eb29f11cd7d74934b93beda2cfae89497e8b5950cf67187028a444ec1824e97288d00b980db699769d490201ddf49b78f896f7a435dacbb8ae1dcf101016bea3b0fd305f9ccfe0b069e6ec10ca437215c723f50b3da093301cc2a96dd7c527e92de7002ec45dc28609327e0e7ed89341a16f50b585c613673ca6f0b292ab4a3162b721f17edef75c87d6f94dd03436fb7f66c5c8e8f8cc82feb5403880a1ddb4f1f13554f5257b7917221bdb66e631542e778ec4297bfa2563bbe10e42754c4108af2c00ced1cc1b05345b0af820e96844f17e535eb968801d9c4c2df69ba65ca7bc40197d7798cc25475517e90929551569ad8d8e45e64917648e9c9a97f1c9ac8e2369b122508612a019fded8683b6fe30a87d0aef71ae47b5781515bb1ade8d2a1652512850a82cac118b50e94062cc8de21d495153ec8bcf7a59e2892a68601b77049621fcbe98d4e1dfe723d0bca70e38f5311650640497486e2567ff1dbae1b3a083f0deeac3d5e1f33653079ffd97bdcef3930391a934783bcc301b7c3e7af14f15d5cf357f7f863a7f5806b60bb3c39d7d4eb00a1312a1be454c205aa75b5d64d4b335280a6a0628d13817fb082bd2b6590657f18775c6ec123d537528f3cf2c66c1a5fc341c8bdd451ef47729d805ba9f488ed9e24ec0308179702035c234b6418ad0cd289ac0450d88b6ad55d214b76daefcb187c379a7a85e08495209e1eea6c209621af56c42b4e42c97d4e908568eea178e6be85b22880ad4ac72f611bbdc00cd410e2ca1ef2bc156b79b267047fca3ca2bf97dabe1a4aa8cf0ae5d4672cf67efcd3a86408d832cf427e2caed572051046d5f32c465fd310ccbe6a81b10dc8a5b09afe23a081cbea17da914428307ac70f79f18b20a282fc5906ff93fcb858d19a0eabb36562057b91403362f2729d18e7d533e8f96413e0bc7a34c13605d6dff19e10f336c01c751e77e9c669b1567e341fab3c7ededf92135d2184a97041b9c6134058445b4b58f04e479a944e28a38d2a334df2e789f40672e4bd97489969516a0db9ca064c864ff970b8b1dbf1e0ddf7268d350e6eb3db8ae9b3709ece92803e3a3aee08de9b226c0d0de0b6aa0e76d2dfc03aec801353536f0e9d7285b052cb2b6f35353717329adf14970653490eaed4a5aa88ac22dfe63db3fedbf857fff634e9594fade0f926a4bead4c8b5a0f721b922eb1574f690b60634ae8970d7271d6930b1fc80e7fb0c8f2515f05e3892cf18075fb3379d3e97cf6693ab68449da3b0a412f37882922e5216792cd969a560651528df5ab0292f8a4ac55926902742351e76ca21faa2c5ec315486adc1f3a1297d68d400d51cd9223cfa8be452b727ecb70e30f5891edd9fd74e2a17bd4595bc314085d021cd8fe5c8bf1ab1cfa842296f5e768f554c2af1e956b34990b8295299d1ec95130c4ae4605fd0e43618398881a498fed635d47141801034eabf89aa8fb11de15edb1a8ffd44dd009d2b89a9d948bdbc786f1d3cab891fa724e77b82f774ccc3a1b8ebe2b79b0b3601b975ad8f5821417f73d078829d9cac46f7c2ecf63de2f31751ac4c3a9196c227bbfc8e0bd7df421ccb89ce5cb398a10f330f689bc8bcc13d6af12e3af116cd9f36cf70f7231109ef28550807533765844e1b4fa248cd807930ef64c4d5d11c96a42ba0e29855d382a2f41ce16b165d93ef5a16ab1ba7c6fdd15ae0fd1ddee1b761e5eb319a17857e8e211ba544970cdbf1dfd9e6df2e0685e9180d6b6cdb43b89800dc0261983ee434f3bf1ce290a92f22d6d1bfb08c8246f8883e6236b4a25371b76cce9b993e8c9198b17f75c7b43630dc01667f9dba34b85e2f18559bbc961eb50de04466acf64344c3c4efdf05e3405058c841e7fe13a6bae6a1352fb4bdd5c308236c4d21b338b476f066b919157422490e76335efa2e0f07827f76b4b02a9b61dd7417a529d8328a5795328e3f45b7f02cc3e9047743bc73a5751e9dcdb1f9f2cbef3a2feaeb5c4a9e9035a7a87c811a1981f53f08530394e5b6e8b764f79cb0d49d16cd22d37cda399d8b8213c86d4e8c081d5c7438a928cb6aebfd84a1589ac897ac8fb1fa507ff6fd6c17747689ed4ae4c1a4b4064d97bf40acebaa7fa283fcea57b098a43b2e76984644e9190d1604e1bc586813bf4e84661920c07167e54889e277351ce4c992e8d486a604ab34c592ac7e4b55b3d5ac0b6a2a7b5e1d830fa76526d90248356d426d48f23bcae64e7614886a76291d82efa19ebe3579cfa74ed13d4a4ea8943d647eb06ce7285cea0ff1502e0e1d24d6d15aff314efcb3fda7751994ce9f4087a2a4516439d51b22eb65767044683fcf24a5dfa9b8ef8148ea805163848067fcb52c43854934f17788a2dbe8d6ce03e5a9d637611e2a10723ac374b2d8db962272633faf27d482fec7903e2ecf2fb76bd05fa33e005679265b5a2a180df705ec540beb308419e4538568d9eab3189b611dbb0b4e43e781105bfeb0dd191e44faf6b63129c5cf54ccba6ac0e18819000457a4ece904c9ffae6ac53efb6c3090a99ac3ad102a980300f040d0588ffde1d771ca9bf88bffdccedd281afc7c71691a4308361c4b37f4523dbdeb0fe11fa392388625e10317cd57e6b508cd6e2535f01398c0c18507397033c12825d27d0acae216c2322443f6f8833e7df1c6bf9caa9e8591200d4063239b61a9c1f2eda796236f4a602947b56f89985bb9c5082d1f9e3a89100a11b7d320d8a4081e7b319d1c79ea195841585db4ba66049d4dce7a9eb2ebab93673886b599bd92c1e06e05a937135a3a99a207066cba165159775c9e6e9ee8f600834d0f6fc17dd4719c8b0af1d99d3a86d5d38db553b546fdb73b96c55377df6e0103159af703e0ae040be3ae1b28b676a3f1e3878d946e52529d8fd9b8a5565355f7cbb73977a484fc0b9598484e68b560aaad7002dab8fff4df43894f1272793ac19081dc214a1430b9c72eb2b5cedf34eea9ee569f4b0f964bd87d6f3eee191cbf044f1d2c7cacb99c19446942297a5fb362baf6351aac1ff3af78bcd6dd590999950189d3a59c6b9804c900ef3d80500a88b23abc0a285aea036c51863b1f962b841202c1e2d29b1cb13ce8be99c9c906b45e22e2a0a2a8960bdce6c141a53b584f14e86421c2149fd58de42aa84754d00bcf3e8c32126800ba0aab5d2f55bc9d6c8ced0e7e8118abf26e0857d887496dcd60c355fe3c7e51b74e8712d22c0e5e86699e2a735ad35101de3671a1efe03bc68a5ddfef76d0866f135d330d39657b8221a65cb415be32fd3317c90bcf79a141e5df377eba61500770c8dc685d08e603776ab5f34461029a4ed79309f39996b0416ef53f8f0f276ff8587885139bef497acfdea85b03edf0b5667408ddc78774433a795d1d56546fb65483da3c7b4ff433038632fc8381ce3b6148c6ba27e6b1bffe06551eb6aea04ad55c2731e28db873c22bcbbdca8360295d649df8677cd08cef60f728d2aea581fe7dc5c349fcc7dc83f56fab7d9aacde1f0b1538adbe96cd06af23be6ca32566bdf17b0b6ae031a5912179d9b88b60047ac494e4c54635b846a216ab90a6e68b8e0269806a7a467168e1c12fd98adb9167df643a79b318ec6e3b6831d57213ed79c9d8ea7695d5842d1fb04d7c79bd827d87ccbf407be84c3807a63b625c918c2c0dc98f0c89111353a3a90b456c41d11df3633e20969b573cb1b3aa8007d7fdc6a7010b06af31b7554f93439ae2d58b211eef29158f76d70f2e310af893b7a96abcc75ed5833eadbaef0e5918ebeca804bd493ad718c0070dcc7627dbc71b1d4de3c2017bb8689dd1481a95c87ddd6300a42b5c109c7c0f031d3b520992f0df684b7dbab77bcbfda95c1da0c4ebf30ed417f82576acb7ce019ea18f9f1d1369b4ec641ed232b010a0bc4b8f56616c2655fb81db05f3a27c619b49c4c3bbf7c19aa5d42b104968388a3974a1b851d3cf4a17dc32871ec87964098479c5e567b252a9749f82b8d7f1509ffd7cc1ab00081822013dba725504105f22285e368468dfaced895cad08c55aa688ced764ba99e4049512fcd9e9d47951e0276cfcbad8f3f01f619ca6f03981a00c870b81d60e6f7886e136dd398f8734b663c9fa0622ce2e585494a7a12d23c343ff3de5d6df72767c410027790de529997fa9206cb5846d1a5220ea903abd0100d73a6615e2a047e75b982c09c78310c719cd386625db85c7c74b6a073bedbb684f4ffa5867436", 0x1000, 0xfffffffffffffffb}, {&(0x7f0000000400)="67973f524925792ae4473657aefbb44349b25116d5874b27ba68c0583f2be1705caf22e06bc41727d3d6468be6764982d59044833e5552628ae3ba7f0c647a9815247506de3d24d0fdb263f5eeb5c6ed3b5020472b376bd77e2225e2985dea0744e5a2fe701bdf9932d7c2dfc17f6258", 0x70, 0x3}, {&(0x7f0000000580)="d6481a2cf82654f6761522965bde048ac5d94ff8d435b52c63a81b9a2388e12a8582a9914a5936e64e9e1d1f91f7f4fc84852fd770c61669f478232ed778c73ba9aed98d07ce3e924d9fea64bcf7202ed3bf588da114accb19e34deebeb017ab8e79b3ae8cc41ccec60ab80df0253dc99a152ee0ac9d35f172654520c92c38744cabedd56c231166a1eb650d307a3c3141ac00ec870d979e5755f926fe1cc9714dbe92b8c3571fd77ca6c66ec2c7aa668748d12446e11d3f6319b937ffb69bce5add95e00d4cd6a71c38f62a749034d90a3e355b763ee7fa3b7321733437cb7ea352551d2e72cecfb1053541f17ec6863219", 0xf2, 0xffff}], 0x40000, &(0x7f0000000680)={[{@grpquota='grpquota'}, {@data_err_ignore='data_err=ignore'}], [{@measure='measure'}, {@fowner_lt={'fowner<', r0}}]}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x4, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005700)={{{@in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000005800)=0xe8) 15:31:11 executing program 4: clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x11, &(0x7f0000000280)={0x0, {0xe1}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) r0 = gettid() clone(0x2e828903, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) tkill(r0, 0x26) wait4(r0, 0x0, 0x1000002, 0x0) [ 219.213050] binder: 9328:9332 unknown command 1364 15:31:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) accept4(r1, &(0x7f0000004340)=@xdp, &(0x7f00000043c0)=0x80, 0x80000) [ 219.246056] binder: 9328:9332 ioctl c0306201 20000040 returned -22 [ 219.283873] binder: 9328:9332 unknown command 1364 15:31:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', r1}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="000001000000000002004e2200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e00000020000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d75a2fd8b39f29a28a32ff024a8fbbbdc81e0d26ac6d4eb541115ec948346d9059aa1e30b123a370bc7e7c7faf8a416f871cb08624cac549619004a17a911597b9cd9e19f58588fe3fd7e9d3e6bb10106bd0a86207820c2ed7ba5ae5a145c750ca8c3e4cdd9a17052375fa0bfe8b78a40ab6be543d9c59"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)=""/69, &(0x7f0000000080)=0x45) [ 219.306395] binder: 9328:9332 ioctl c0306201 20000040 returned -22 15:31:12 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@empty, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000032c0)=0xe8) 15:31:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630805", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 219.781903] binder: 9372:9376 unknown command 84435715 [ 219.794911] binder: 9372:9376 ioctl c0306201 200002c0 returned -22 15:31:12 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x4d0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x18080, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000080)) r4 = dup2(r3, r2) fcntl$setown(r2, 0x8, r0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80400002800000a2abd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="09fb00e4", @ANYRES32=r4, @ANYBLOB="3800030055404cc7f809c2dbd006c58c544455df77eafc66a21218d2355189f02df402d6574e710c57ad1bc8470916f8d300097e83d3499808000400ffff0d0008000100", @ANYRES32=r3], 0x4e8}, 0x1, 0x0, 0x0, 0x4}, 0x0) tkill(r0, 0x14) 15:31:12 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') mprotect(&(0x7f00002d5000/0x2000)=nil, 0x2000, 0x3000000) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) getsockname$packet(r1, &(0x7f0000003080), &(0x7f00000030c0)=0x14) 15:31:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) fcntl$setsig(r0, 0xa, 0x9) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000002000)="18", 0x1}], 0x1, 0x81003) sendfile(r1, r2, 0x0, 0x102002700) readv(r0, &(0x7f00000007c0), 0x551a27d2b780fac6) r3 = dup3(r0, r1, 0x80000) pwritev(r3, 0x0, 0x0, 0x0) 15:31:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240000, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000440)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="a79d604e", @ANYRES64=0x0], 0x0, 0x0, 0x0}) write$binfmt_elf32(r1, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x1ff, 0x7ff, 0x1, 0x3ff, 0x8001, 0x3, 0x3e, 0x3, 0x31e, 0x38, 0x129, 0x7fffffff, 0x1000, 0x20, 0xcc41, 0x401, 0x81, 0x81}, [{0x5, 0x6, 0x9, 0x360f, 0x7ff, 0x1ff, 0x487, 0x80}, {0x4, 0x0, 0x7, 0x2, 0x683, 0x8, 0x8, 0x6bb7}], "529cb3fe6ff3be6bb6190eba1a38937344703afc37d7da70443c48b8da8157d1d13f033475eee2a2c80a38777c5529347daaa619d95ba87f7ff73c896c3973515a38b7842ec971b0127dda1a07540e09250a9eaabb88a7de5449504b929f5215fb021baa19b7230eab4ebd089ef544859553e686967f26bf73623099d3f49251809880516d", [[], [], [], [], [], []]}, 0x6fd) 15:31:12 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40030024}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48890}, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 220.044511] binder: 9385:9389 unknown command 1314954663 [ 220.054766] binder: 9385:9389 ioctl c0306201 200002c0 returned -22 [ 220.075041] binder: 9385:9389 unknown command 1314954663 15:31:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000003000)={@ipv4={[], [], @dev}}, &(0x7f0000003040)=0x14) 15:31:12 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_robust_list(&(0x7f0000000300)={&(0x7f0000000180)={&(0x7f0000000140)}, 0xcbe2, &(0x7f00000002c0)={&(0x7f0000000280)}}, 0x18) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000240)={0x4}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) listen(r2, 0x3) accept4(r2, &(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0xfffffffffffffeb3, 0x800) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r4, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000004c0)={0x82, 0x6, 0x8, 0x2, 0x9, 0x185ac3cb, 0x4, 0x1, 0xffffffffffff3562, 0x80000000, 0x8, 0x9}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) dup3(0xffffffffffffffff, r2, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0) 15:31:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/96) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 220.094125] binder: 9385:9389 ioctl c0306201 200002c0 returned -22 [ 220.163546] binder: 9403:9408 BC_FREE_BUFFER u0000000000000000 no match [ 220.190496] binder: 9403:9410 BC_FREE_BUFFER u0000000000000000 no match 15:31:13 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:13 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00afc800", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xb8, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000080)=[0x28, 0x48, 0x58]}, 0x5}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xea491dcede1880ce, 0x0, 0x0, 0x40, 0x40, &(0x7f0000000180)=[@ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x2, 0x3d}, @flat={0x77622a85, 0x100, r1}], &(0x7f00000001c0)=[0x0, 0x78, 0x58, 0x30, 0x38, 0x38, 0x30, 0x18]}, 0x7f}}, @release={0x40046306, 0x3}, @increfs_done={0x40106308, r2, 0x2}, @register_looper], 0xde, 0x0, &(0x7f00000003c0)="73d2963643cf9b3efa81359fc3f85f91c262d5cec21952e8821fb7c6a62a44b0c7d994c3244f3fb3ae646db8e8e755b3593cccf1661e39a95ed88318b4684523b7dcdea0bca380db8e01e720c62df8ca7ade99cd88be684f5743d021c6a02baee41ec58b644f333fa40b343f25b31b15a5747869e665a11258b2a3223187a1ab2f6fd2d6eb54863dd06fbccbec0c89d1b3b89b3026bb39a8e7b351bbce250f413937e5ba7da88482078e43487ac525a162e52acbe670e399a6eeb15633ed6f14eec9b53e0603f03e5f4be063d237fe9627ea3a8e061acc1a37d001f49e4c"}) 15:31:15 executing program 5: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r1 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x6fffc) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0xfffffda8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x138, r3, 0x70d, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xc95872e78d306166}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x138}, 0x1, 0x0, 0x0, 0x4084}, 0x800) memfd_create(&(0x7f0000000280)='\\%,\x00', 0x6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='bpf\x00', 0x400, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x100000001}}, {@mode={'mode', 0x3d, 0x1}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, '+'}}]}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000008c0)={0x8c, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x592f2bb6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$P9_RSETATTR(r4, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0x7) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000180)=""/62) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000a40)=0x8000000000c) lsetxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="03020600000000020020b6b8ddb3c81cb036ba860a9693c6686f67a272ddcf00d02ba6349ce6cc2b2b44f62f2cfc21d0b51f92f0d090088a3956ffae78442f3c796276a510ef1bb506d956d47de554dafeea6a23f084b94422a42aba1f366e3226d6897d0d4e780ba6a68deb6fe2edc2329b9c3362f041f6cab7e381f33963304896c29c563658643a16df5c43f92078585b4fb175895029f584868f450f551ea60b2f5937cb"], 0x2a, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 15:31:15 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) vmsplice(r0, 0x0, 0xfffffeeb, 0xa) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:15 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffd8f, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="df000000db2fee99072654e912a741b6ee516839c36aea763032258bddb0bf24cdd7da367f7199b28e787dd20a518d35455f67e598daa180917f9db806f6"], 0xfffffffffffffc1b, 0x0, 0x0}) 15:31:15 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000180)='encrypted\x00', 0x0, &(0x7f0000000200)="8432de3b52ece64e2158093ecb5769c9f78914", 0x13, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r2, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0x28, 0x0, 0x0, 0x3e220a69b697ea34) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x113, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000240)) 15:31:15 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 223.063137] binder: 9437:9440 ioctl c0306201 20000040 returned -14 15:31:15 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:kmsg_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x7db8, 0x20, './file0\x00'}, 0x5e) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 15:31:15 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) r0 = dup(0xffffffffffffff9c) r1 = openat(r0, 0x0, 0x2000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f00002d6000/0x1000)=nil, 0x1000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x51f, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1200000000000, 0x4, 0x1, 0x73}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) creat(&(0x7f00000003c0)='./file0\x00', 0x106) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x10000, 0x0) sync() pwritev(r4, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 223.174288] binder: 9456:9460 BC_FREE_BUFFER u0000000000000000 no match 15:31:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000000)='./file0\x00', 0xfb791bae5fb66ca0, 0x8) getpeername$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0xffe7) 15:31:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 223.304568] binder: 9469:9473 ioctl 8903 20000080 returned -22 [ 223.342402] binder: 9469:9473 BC_FREE_BUFFER u0000000000000000 no match [ 223.378590] binder: 9469:9480 ioctl 8903 20000080 returned -22 [ 223.401065] binder: 9469:9473 BC_FREE_BUFFER u0000000000000000 no match [ 224.578763] audit: type=1400 audit(1553614277.279:54): avc: denied { create } for pid=9443 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 15:31:17 executing program 5: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r1 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x6fffc) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0xfffffda8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x138, r3, 0x70d, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xc95872e78d306166}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x138}, 0x1, 0x0, 0x0, 0x4084}, 0x800) memfd_create(&(0x7f0000000280)='\\%,\x00', 0x6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='bpf\x00', 0x400, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x100000001}}, {@mode={'mode', 0x3d, 0x1}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, '+'}}]}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000008c0)={0x8c, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x592f2bb6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$P9_RSETATTR(r4, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0x7) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000180)=""/62) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000a40)=0x8000000000c) lsetxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="03020600000000020020b6b8ddb3c81cb036ba860a9693c6686f67a272ddcf00d02ba6349ce6cc2b2b44f62f2cfc21d0b51f92f0d090088a3956ffae78442f3c796276a510ef1bb506d956d47de554dafeea6a23f084b94422a42aba1f366e3226d6897d0d4e780ba6a68deb6fe2edc2329b9c3362f041f6cab7e381f33963304896c29c563658643a16df5c43f92078585b4fb175895029f584868f450f551ea60b2f5937cb"], 0x2a, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 15:31:17 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03e30840", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 15:31:17 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000180)='encrypted\x00', 0x0, &(0x7f0000000200)="8432de3b52ece64e2158093ecb5769c9f78914", 0x13, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r2, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0x28, 0x0, 0x0, 0x3e220a69b697ea34) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x113, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000240)) 15:31:17 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:17 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f00002d4000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) mmap(&(0x7f00002d5000/0x2000)=nil, 0x2000, 0x2000002, 0x110, r0, 0x0) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0363085ba257d6e04d3065f4c6ebc8600d8b610e90744b51b31440e735bd825c074492e897e0e0066bfbfdb2a8606fe88a4cd0ee22418cc1da65b98f26c5cbb69c9b18316319169175e82d8c726e6b000000000000", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = dup2(r0, r0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000300)=""/254) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)={r2}) pselect6(0x40, &(0x7f0000000000)={0x7, 0x20, 0x100, 0x7, 0xca5, 0x3, 0x848, 0x7}, &(0x7f0000000040)={0x5, 0x3f, 0x7fffffff, 0xffffffff, 0xfffffffffffffffd, 0x3, 0x1}, &(0x7f0000000080)={0x2, 0x7913, 0xffff, 0x9, 0xfffffffffffffff7, 0x80000000, 0xff, 0x1}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000100)={0x1ff}, 0x8}) 15:31:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:17 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$void(r0, 0xc0045c78) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x4, 0x4) renameat(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 225.044625] binder: 9510:9512 unknown command 1527276291 [ 225.073334] binder: 9510:9512 ioctl c0306201 200002c0 returned -22 15:31:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 225.097389] binder: 9510:9520 ioctl 80084502 20000300 returned -22 [ 225.117569] binder: 9510:9512 unknown command 1527276291 [ 225.123907] binder: 9510:9520 ioctl 80084502 20000300 returned -22 [ 225.133606] binder: 9510:9512 ioctl c0306201 200002c0 returned -22 15:31:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = getpgrp(0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) 15:31:17 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x20000000000000, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf25130000001c000900080002006500020001000100080001000800000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20008000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xfffffffffffffffd) sync() pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x2, 0x62ca}) [ 225.221424] binder: 9531:9533 BC_FREE_BUFFER u0000000000000000 no match [ 225.238105] binder: 9531:9533 BC_FREE_BUFFER u0000000000000000 no match 15:31:18 executing program 5: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r1 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x6fffc) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0xfffffda8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x138, r3, 0x70d, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xc95872e78d306166}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x138}, 0x1, 0x0, 0x0, 0x4084}, 0x800) memfd_create(&(0x7f0000000280)='\\%,\x00', 0x6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='bpf\x00', 0x400, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x100000001}}, {@mode={'mode', 0x3d, 0x1}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, '+'}}]}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000008c0)={0x8c, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x592f2bb6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$P9_RSETATTR(r4, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0x7) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000180)=""/62) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000a40)=0x8000000000c) lsetxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="03020600000000020020b6b8ddb3c81cb036ba860a9693c6686f67a272ddcf00d02ba6349ce6cc2b2b44f62f2cfc21d0b51f92f0d090088a3956ffae78442f3c796276a510ef1bb506d956d47de554dafeea6a23f084b94422a42aba1f366e3226d6897d0d4e780ba6a68deb6fe2edc2329b9c3362f041f6cab7e381f33963304896c29c563658643a16df5c43f92078585b4fb175895029f584868f450f551ea60b2f5937cb"], 0x2a, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 15:31:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, 0x7fff}, 0xa) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:18 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) sync() pwritev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 15:31:18 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) r0 = dup(0xffffffffffffff9c) r1 = openat(r0, 0x0, 0x2000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f00002d6000/0x1000)=nil, 0x1000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x51f, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1200000000000, 0x4, 0x1, 0x73}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) creat(&(0x7f00000003c0)='./file0\x00', 0x106) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x10000, 0x0) sync() pwritev(r4, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:18 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) dup2(r0, r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 226.074013] binder: 9550:9552 BC_FREE_BUFFER u0000000000000000 no match 15:31:18 executing program 1: pipe(&(0x7f0000000180)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat(r0, 0x0, 0x0, 0x100000000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r2, 0x0, 0xf74be1703db37f85, 0xc) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x8, 0x0, 0x3, 0x100000000, 0x6, 0x0, 0x3, 0x8, 0x3, 0x8}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) sync() write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, "558a4da9ce05d31944a6c62693b8df310500145667c4c70c236af10920039102fb85a7d2d48cc4dce0af259034d92ce75abdd8cda79bf460c64a1b47a690b5eb9e627172443dbbcdc9aed550be733f4ad655b45a1addff1f316a901cfcc9f0cbaa8f46344862092fc52e18269101969762527e2f4d2c58faad244d375897c6d1b63be6036fe8b23c26f58b14e59d23103583b8e17ae5f3fcd49e87a0a9f78de99eb30914a0719cf3c78f7e64782b67cff2a798bff3d8411bd54cd018bfcb8adba2126fb81e53a9944b388508335adaa2011819351fa5efb2e53505ed1161928df59a79389a6d4e7fc39dd969d8c9a5d3a294a8d03dcc73871e5e78145a161652e17c42afb704d74c69398b8397e9384f82800259c748eac91c16920a91a7cf9ece7753e07890675d86a00614913d7850ffbc3b0a2b49a0863880f161252189bfdce480e972fe13ab0bd85d4b7a9ae0b1270443f200c246d5c8aa1e9c9c92622f7c27eef24517c4259b37019e0c915ff6deb26a31611aafab6ac89fdd75ca693a9b6344872e2e38ab3f94cbc54286c7965c7ce16010e04354e5309c12c9150fc9c092ef3be6e886d6c1f3e65bec289c312d2f438c4bb624092b9ce96d3cf0e71792f9c944810bb2121bdac9848f87c6d2a7393ef39aac7563844a7f099dfad84a39b0d7d002b00c3bc924e803a2e095c82c367b837ed02a724eea770ca6627a3d85fe51c1f9d67740f12d54b874de7208ad6046e7a51d5d28311278e11ac833d8be9e44788354ac0e740f44b8141a7d423fd7a891b14f36b18e97e37b8e2f37c5647228c75934ca1c69e2b1ed1f9aa89c1c7ff8655a20d0e9eb1deb39ae0d8b363b75ae11f7d3dc8b7b8ed0b2547cc3682f917e56b60c23e8908d4021a19d945a7b86843fbd26f68f5b8f59d3b6a2b1c4f77330eb22228efff65adb7255f77165f9ceee259dcbad0c02bb815a860860e51e74ed0918e607b740520fe224dcf347c174648bee54e6e93843c37b6fd288496911291770d90560366912221c56587d0d8e3caddc4ce99c590f5f64a7c00b0dcdf29151b5f6ade1d950c592fa2fca347b364a1bf41ac4f201cd4ff0370e326ce41dbe45993af24d8dc1451484ffb9141a1c18653b4eb1a960b61bab3bf46a35f0d8d4631e720792437afd551aa7a873dcb81043ff00cef94f6701bb443303d9590d436694cdbce97be1f60b0436ed89195f2fb06a326c392277a18223e75c0db63dcf755ae29cf8a10e986159241a92e08372f7e61e69aa8897a2d15e1aed9317b790b0885dad2f104df07ef43f618da8785da3ea35cd99d753a6560d35a9996a3dc1eee8e4a175b721571dece938dc0d0c663221dd0ca3ef42f01b7484d3d2f92ba5c5a69dff50b2d7203845d90d23acae985746a98544f4022e54a9e3ecb5f9efee4c8d1fa1cfccf522287ab789cba0bd2e78393bcc6ed4bfacb2ba9760f863bfc296d21824ef8eeb3b8be11f25c465ae613f504c4c0e275645d59b4bd1614d5810b212b0b236f3dfc0b8a6133ea4e5c8a8d6132aaed0b62c7d9f35b06fd5aa573b8e132a731de4c674a81dbf7088d8abcf3c3d0c0eae16d09a6be9773e9ae96046d5cdc75b9d4c9a58bb4b56bf1bacfab652ca07f01107e6c6ad7cd7665a69881523461ccff7426b12310096df5206407feae5537a1611c23a10189cdc7e0da1deb8c3ba1fb9b7c38d5564996be50e194fb9c2c46f1d0487d4ac9ab051676d8c621d3e45c59c312f6392b808df4e587d6a63eb9d2d5bdf0babd7dbf69d0597dd9aba79d5a87c9fd074834c1a49e684e8158c183b2ca48b4d50a831da9da8408dc7475f41f30dc1e4a2d18eaedf226cc74bb1eab8015d325166aa5e69688fd58fc5d21956ac82773a79612bf4c8dfef8a06ecfffc4d0b4553446878b1210c97771a5eccc00c87217cbe78ceffe4eb0bf57330a9d81c74eb33b7acb64f2c55a696f068762f599b6f5ce41e6aa38b58b702c581247f70bc54674694b0b58bb0f3805dd4c5d299348b053be154244b431279cc142415161e5f442657650370395f49a614b7a13cf5f708ce3f460626f5dd3d5148ea2ff442305846b13cc1a62223dd8fa99b5fbc112b9de92ed0b54331eadf83493ba7f04e33d400c2aca69cf606e92ef3c198cc3da8cf899f163c84457df48084f0466f80d0462781b9f5b3b32345d7fd70bab1e3c6e36b3d9169b7aab4a6bfe9246be5e24fb2ff17556180d84d118df14eea08b435538aab846b8d153e6de60c7b9f9ba084a58e224518aac2ceddd7940ca1cb1a01677bbe1f017dc2cac5ef5499992fe147cd2e79102ff848aace8b4548cec7aa5f26bf98cbdc13920408d640b5c33e81f2b53280693b04d9b1c7b5d832d6b5649b151feca8ee5a71789c5771ff73a24f6009a47191c4f9f59b4d08df3e9733fae5d3ec4316d68c48e42e85e320c64f52c59173b8b685a0105523121e1046cd40dc89149108fcdd531cd93059b08c70c4f7f14a6605360fadbaff03ca650a9f33b9460501598cf8a23685d313463caedd00e3e0a23cf3ba92e65cac433e0f0026435e9b8b1a25dbc2cc72fe99c1dfd7b56b9a8f06eee2d0243717c3fe2eea071612b344b82035b0d956b875788e7c45e7bfe02a65a2217024f2d8285fe1241b3a71f929da3d8eff2eaae369f0cf384556685210ac98bcaabd4f920c4f958da7f1c5ea9ebc27ef51640ff57f75fd4a2bfafcc6d11d02346be921cadaf0976246b6bb6b175d74321bf364b7b4b5d480e2fbb7e07d979ecafbf1e893fa23320cfbc4cc1f82727176af04ea0e7db1b75a0c1f2e9d7fa393422b32dfd497fc137961bfafaab0de5c42de58131ba5379e810222a7231dc44794acd0d37aaef52c49c0fcc932d29f8a517a2126861428e07c29fe77e09d6a05c9c558ebdd998bb58331a6e6ce2326a863e898d037a597733251307f890fd84cc147fe9f5c1c9af97ef1025255c85fbb3114bb04bb60fea51f383beb1276f05ebc2cb6c284ac37115bbaedb7488041a22766ee19735c19a650a4ec80987be2d0f141227482e1daaa811c0c39d390a1154f675e630f7b30ba7b70f7a3c502f41ea8c89f769de7ce5f06fe604d877155888f49a95707d6568f3203ca5b498e5c761ef4e9d13b4bc056a09ae463339e9d991b8cc5b6d8e794bd62ed4392fa9892a269be5ad37554c67f7f056c45ed364a7fa7d5303bb6154cbf51fb5374e12a191a601b8f1fc8f3d80e53e69e37c60fc6b3a105256d2aebae68cf9921066da364648346156f2f6653c014770fd16424b4409112a98771c0b95104d6f7385a87d9ac49733ebbe256b5de40722eba941b17d4291563d8d0b5cd266a42e8f49dbbce96cadfcfba0886c6094552f181f014cf7c575e633c9697f373c039bad097ebbc345db94d4ac5b69b29a677e74a1c239607abb30e95721ca2ba813687a6c8da7e84e6749f76270daa1ac29282abe87e222acf821e58eb15754aa5edbe4178ed1476f9b43c827f66b77aab6c74c48524cbea754d9fcd3b2b1bf99cf6023673df365943d8dc57c2287d216453b32d31b7c082f4cdce5053eb5111ab790232170b387eeb90f6fa15a6acaf0507b6bf8c3f9f4c35547f47d47ec858f04f9e7eb55eae90ae92eeb8674e1eba6493654188e014da14883124ece01eadcc33a5ac5007b7f76cc4f27e1f6dd333b2c485a2e838e31c8aa18659611af436e0621a52d75962ac81fae8dd86c5e217e7660c1bc73d451f10eb0655cf3167423343c9d21f5b199942b04a40d6214c76a5661f89f3be931f1df58a85ef5d2acd7bd7f67159f470584ea9536ab20d1520ab8489dd6f2895b098a2795bd726b3c952fd7d9521d8ddde568644a2042327d00592a506c1b98f3bdde7cdafde990d081f97ed0c3f67f4bd2c98c121ae15d59c16a830d6c715f586c1a23cecd2f3e2f8925cf7782f25d5694a93436b37214b57100bc78aa46c93c8c895e7fdd16b36dfb2d063004ee8b5bd401f25bb9294d468f2d5b2d11c52f8c91d7348c7a0fc0c80a8a72560da1b827d986e5ba778b3609db3397993e29b875ecc9dffa8946c2d252e063967cc025244381ac14f4d3a28481d7e9ae1629e0c03b2a76813c9352eb1b0096c79be2ba2c966265a35bc22f17bb942152ef6d49cabaceb37bb009072514c9c9e7910cd6bdd935bb16cdca53b6a40a9918a8c71c99a6db28223207f337f63947827983ebe5f8f685c81e19e30f91b447f6eaaf155353db9c2da3af796e709bf633df27deeedf52b31936679c2b47f07e20a30d66fa0703b2e343d51d057d39d4ff9b04599dcfa601964f97c0ea48b1507dff75250a5ec69eb2f80ac6cf045ce4c3f77b8e38c7c0417676489e6e14b2694e8241ad32b0bdfec61e6ae8e715ff50c26b153ac3ba2f9cb0aef1d1e71d45bd556179a9d774b66beaf92cac50b17b66c909e1b1972efc298154e411b322ce5c5c5a76b4e8899b86195cd16931897bbfd4f3f102ebb95a060d061e7f09244164af45ad306b651974b4716dad0beaf5fef6636aecb08709e6a5729d4c32515d13f87b1f4e9f57f1ab51386d0dc1ccd5afb69e3ee1d4b95569009e802961be66faf3f65de5ece4b95bd2cb348e0633ce5169ec9c48b97e587f999fc866d3b4d294957fc869d0ce27fb021f090473d8b76783bfea12ebe4ac3a6e04153727bdb5d7bbf2145f6327e74bcf08bad4661a108ab28b8d430a62b300bef52a87d7183ebd50df906f4c0744ab4f600729105793933d45019d7ffc3cc009a76bc4ba41a90cbd33ba7d96ededfe59efed216b0cdcbd4057ced04e80a8fd1f5d1dd22d617df4010fd32e4e207d6c069818420cd0390e514ae5c298fa7bf73f42aa27e85ee4a8c1aa137da4b2fdd6800cc6e68983a6a772410dd519e24ad3ec4fb767883f729f3d201bd0c97a57047ffc356f9f22c4f390b8a0438220f4069034daf19f99b673b5d07f0f2d0f3fe69593e17b4472553e96e6b07a7c4f5a5ca794ea4c49aa652130d73656f37831d43fa296fd8b9d8eca259256763316794ec8cc62cfb88e71d0005adc83c9b71cce7c66075d2d510548513fddfa5859adbf69d8ebba661a52177551a0e096d5fee0b45e7e98f8731e728c78be8f3e9eba6dd1b6fc326110c5b4363aac0ba473bf2003eeb46141f4269897b19d483d4cef743df1b0c76a1c5d4abcb57cc92f051f6bf52a23dce68a5641fb7c9e0bf60e71f3e24f367666cf398790a2e8188346e93205aa2b813de7bfa703d6d4e737c45fae8581eeadf3cf410c08ebfae549c05e35cd18ec182903a63b991ed1b30fb5a3d859540de8926d7f214e077d98cd1da71d53619e0c7b0b498b67b6e36ab877053cecb402faaf85e6f48444271bdf85c40ede1541e6274f995b84abb3e6ee0d6ee746ccfed95ee8b1774544e0f5de34b1da7735da348c9e3e386e4f4cb14d2f101d5d0c9f790b945bf94eaf15caef01b5807a9e66f1fe346bcc04019a5a6eef5598708cc5424dcb07a3e244e29f4d6689cc7ceacb701b28785974205d87f040be1d342915ec2f07cbd29abc10f0702488be8ce8c616d18aa70fd639f8873be215de611fa1faf51537a7219bebda133ab9b153f96856ddfa5266cca2405814c016f2e9617ed5d2d6e46cdabe546bc525b2a98e72a349bac08c8153d7cc4965f2cd7d82dafb097996f7a74b7c4d1fd37d21aa7061a61ab8cb7bc06c33da16833904d6500d89866b5fb40b258b34881da65d9549b39a8c7e462d69458219310e2a69b04e857cca25a9ded67ba07c8d614501eed", 0x1000}, 0x1006) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) pwritev(r3, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000140)={0x10001, 0x5, 0x3, 0x0, 0x16, 0x85, 0x7, 0x3, 0x7, 0x3}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 15:31:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x0, 0x0, 0x0}) 15:31:18 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:18 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 226.187048] binder: 9571:9573 unknown command 0 15:31:18 executing program 2: prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) restart_syscall() r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'bcsf0\x00', {0x2, 0x4e20, @loopback}}) r2 = timerfd_create(0x5, 0x80000) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x2, 0x1f, 0x8, 0x8, 0xfff}) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc) setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@v1={0x2, "fcf2752eb8"}, 0x6, 0x2406f9181645171e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 226.214686] binder: 9571:9573 ioctl c0306201 200002c0 returned -22 [ 226.302520] binder: 9581:9583 BC_FREE_BUFFER u0000000000000000 no match [ 226.331203] binder: 9581:9585 BC_FREE_BUFFER u0000000000000000 no match 15:31:19 executing program 5: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r1 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x6fffc) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0xfffffda8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x138, r3, 0x70d, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xc95872e78d306166}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x138}, 0x1, 0x0, 0x0, 0x4084}, 0x800) memfd_create(&(0x7f0000000280)='\\%,\x00', 0x6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='bpf\x00', 0x400, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x100000001}}, {@mode={'mode', 0x3d, 0x1}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, '+'}}]}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000008c0)={0x8c, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x592f2bb6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$P9_RSETATTR(r4, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0x7) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000180)=""/62) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000a40)=0x8000000000c) lsetxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="03020600000000020020b6b8ddb3c81cb036ba860a9693c6686f67a272ddcf00d02ba6349ce6cc2b2b44f62f2cfc21d0b51f92f0d090088a3956ffae78442f3c796276a510ef1bb506d956d47de554dafeea6a23f084b94422a42aba1f366e3226d6897d0d4e780ba6a68deb6fe2edc2329b9c3362f041f6cab7e381f33963304896c29c563658643a16df5c43f92078585b4fb175895029f584868f450f551ea60b2f5937cb"], 0x2a, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 15:31:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:19 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') creat(&(0x7f0000000000)='./file1\x00', 0x80) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000500)='./file0/file0\x00', 0x0) 15:31:19 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffff8, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000002c0)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) getpgid(0x0) getpgrp(r1) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r3, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x0) r4 = syz_open_procfs(r1, 0x0) getpgid(r2) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_ON(r4, 0x7001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) mmap(&(0x7f0000355000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="0e88d55e42bcdc6f3f9a0f64a168005f50b1955ab6c4a3a60ec47cde962d42988d34eb41361360e26770a36ea332efe7dcc151eb5834a84ff7339e5418e562498b6a24bb32ad4ddc44ced2c02aa6a58ecdfa90fa875d", 0x56, 0xfffffffffffffffb) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x16c, 0x100, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x0, 0x0, 0x0) write(r6, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000000c0)=ANY=[], 0x7fffffff) socketpair$unix(0x1, 0x107, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 15:31:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f00000000c0)=[@exit_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x18, 0x30, &(0x7f0000000040)=[@flat={0x77622a85, 0xa, r1, 0x3}], &(0x7f0000000080)=[0x30, 0x28, 0x48, 0x78, 0x0, 0x30]}}}], 0x2d, 0x0, &(0x7f0000000180)="5e0056d8110fc9ef1693d6c8bded7af4bc713397a3c263936abd6ee4766505fa6140157f38f80a9eaf94a20bd5"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 15:31:19 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') fcntl$notify(r0, 0x402, 0x5) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 226.953123] binder: 9596:9600 transaction failed 29189/-22, size 24-48 line 3117 15:31:19 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 227.000014] binder: 9596:9607 transaction failed 29189/-22, size 24-48 line 3117 [ 227.035151] binder: 9596:9600 BC_FREE_BUFFER u0000000000000000 no match [ 227.035421] binder: undelivered TRANSACTION_ERROR: 29189 [ 227.049922] binder: undelivered TRANSACTION_ERROR: 29189 15:31:19 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:19 executing program 1: rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00') capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141065, 0x13b) ftruncate(r0, 0x80003) 15:31:19 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:19 executing program 1: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000240)='./file0\x00', 0xfffffffffffffffc) r0 = open(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x13) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000380)={0x8, {{0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}, 0x88) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000280)=""/212, &(0x7f0000000040)=0xd4) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x3ff, @remote, 0x5}, 0x1c) 15:31:20 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x1f2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) 15:31:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400, 0x8) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001e80)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002200)={0x188, 0x0, &(0x7f0000001f40)=[@reply={0x40406301, {0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x48, 0x8, &(0x7f00000006c0)=[@fda={0x66646185, 0x6, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0), 0x1, 0x2, 0xf}], &(0x7f0000000740)=[0x28]}}, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000780), &(0x7f0000001d40)=[0x0, 0x48, 0x28, 0x38, 0x18, 0x38]}, 0x7fff}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x38, 0x30, &(0x7f0000001d80)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @fda={0x66646185, 0x2, 0x2, 0x18}], &(0x7f0000001dc0)=[0x60, 0x38, 0x0, 0x78, 0x18, 0x18]}, 0x40}}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x28, &(0x7f0000001e00)=[@flat={0x77622a85, 0x10a, r2, 0x3}], &(0x7f0000001e40)=[0x48, 0xed8306f52109350a, 0x78, 0x0, 0x70]}, 0x2}}, @increfs, @free_buffer={0x40086303, r3}, @reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000001ec0)=[@fda={0x66646185, 0x2, 0x0, 0x1d}], &(0x7f0000001f00)=[0x28, 0x38]}, 0x65}}], 0xd4, 0x0, &(0x7f0000002100)="7ccb83c93b7fd11e9dd8dcf612ad97afe6b231735ef2566f4ba1439ed786ec080f13caaa63b03db9842e3d2a23ca5b91735c50b9e63e192f2843cca6ec14bb98771490cf141cdbcbb5bd8b383fe56a84dc761bab213c43da10e3fe97988cc814522528c8b482b9b7d2cdb854cd8ee1fc0083197a0254b9a5e35e600c2d63cb050a66bcf20fca54a12ba2c3de5b4cfece7cf56da0d9a6f60095137dab4c2f89715ef57a434d89e96ea20d1a9b533ffc838ce2fe23a90f8427cfa3bd5ae1073b563bc6a5634761126b83f03a7f21d907efbe9555bc"}) llistxattr(&(0x7f0000000780)='./file1\x00', &(0x7f0000002740)=""/239, 0xef) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x28) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000600)={r4}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000440)=""/64) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000023c0)=@nat={'nat\x00', 0x19, 0x8, 0x13e8, [0x20000940, 0x0, 0x0, 0x20000d68, 0x20001860], 0x0, &(0x7f0000000480), &(0x7f0000000940)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000110000000000000090006263736630000000000000000000000069726c616e300000000000000000000076657468315f746f5f6272696467650062617461647630000000000000000000ffffffffffff00ffff000000aaaaaaaaaabbff00ffffff000000d8020000d802000010030000637075000000000000000000000000000000000000000000000000000000000008000000000000000500000000000000627066000000000000000000000000000000000000000000000000000000000010020000000000002200000006000104d9010000008001068000000000000705ffffffff9900000000000000090033027f0000000100045d05000000090000037d020000f9ff00004a0000004c00ffb809000000060000014b2fc53a1f00fe06ffff0000030001ff0080000000002700010000000104070700000000040024ff01000000ffff02ff81000000010004e0e3a6000003001e0300080000d6000100faffffffa4090206040000000700407909000000970408008e020000080094087f000000010107000100000040000134b10000000500a0090000008001004b050180000005003c060100000000000700000100000100080402000000d80167eccc1a9e2f0008000120000000ff7f00000500000003000006018000000600030302000000010004080600000005000100170a00009f00ff0905000000f9ffea0009000000c02b83010900000004000801090000000400090009000000090008017f010000e50104420008000004000206070000000000be01050000000bffff077000000009002309010000000600ff000600000001000901000000000104001a00c001000200ff010500000001000001040000000400003f07000000987c010101000080e755043f08000000020006ac0100000000002c01010001000100260006000000ff7f01ff00010000000005b701000000ba0000fb0101000000001a8006000000000003ac810000000000000009000000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000f0ffffff000000000000000000000000150000000000000089ff76657468315f746f5f626f6e640000006e7230000000000000000000000000006873723000000000000000000000000067726574617030000000000000000000000000000000ff00ffff00ff0180c2000003ff0000ffffff0000b0000000b0000000e8000000737461746973746963000000000000000000000000000000000000000000000018000000000000000100000001f0ffff0000000000000080ffff0000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff02000000030000002600000000116272696467653000000000000000000064756d6d7930000000000000000000006970366772657461703000000000000062637368300000000000000000000000aaaaaaaaaa2a00ffffff00ff00000000000000ff00ff000000008808000010090000400900006367726f75700000000000000000000000000000000000000000000000000000080000000000000001000000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000030000000200000021e1000001000000b300000001000000080000000100000006000000010000001f000000030000002000000003000000ff000000000000001e0000000b000000000000000100000000040000030000000080000006000000010000000000000040000000ff000000a1040000010000000900000000800000010000002000000005000000000000000700000008000000050000000400000006000000010000000000000067f80000010b0000000300000300000003000000030000008b049a640000000007000000cb000000020000000300000001000080010000000104000003000000040000000000000001000000030000000119000003000000ffffffff020000000000000009000000060000000900000005000000000000000000dd070800000009000000020000000600000000100000090000006300000003000000580e000085000000c0ffffff060000000300000009000000000800000809000007000000000000000100008002000000337600000300000087830000010000000400000002000000ff070000030000000900000003000000ff000000030000000000008003000000080000000300000005000000030000000800000008000000f8000000800000000100000001000000010000800600000007000000ff000000270c0000c09fd8100400000007000000020000001f0000009a0100000200000009000000ff7f000008000000ff7f00000304000005000000000000000700000001000000060000000200000009000000030000000100008001000000200000000300000002000000000000003b0000000000000009000000010000008a2a0000030000008000000003000000ff00000007000000874e000019000000120000000100000081250000008000000008000004000000b2000000008000008106000000000000090000000200000087d3241e2ed9000001000000060000002000000002000000050900007209000000000000ffffffff01000000000800000300000000000000000000000200000002000000fbffffff03000000030000000200000002000000020000000001000003000000aa95000002000000ffffff7f01000000df0400000600000002000000ffffffff0400000081000000ff7f000001000000000000000600000008000000c7000000ff030000030000000700000002000000060000000400000004000000010001000000000000010000030200002000000002000000020000000200000071060000020000000800000002000000ffffffff010000000400000003000000020000000000000000000000000000000400000002000000ff07000001000000050000000300000000000080040000000400000001000080ff0700000000000040000000ffff0000c40c000001000000060000008c0000001408000000000106000000000000000008000000020000000500000001000000070000000900000004060000040000000300000002000000030000000500000003000000d00e0000030000004000000000000000060000000300000001000080030000000400000000000000090000000300000007000000030000000100000003000000020000007f000000e3000000900e00000200000081000000f9ffffff05000000080000000400000000000000010100000000706905000000ffffff7fffff00000900000093390000018000000104000000000000770500000a09000001800000000000000900000000000000000001000300000001000000010000009d000000030000000001000002000000060000000100000006000000030000000180ffff00000000ff0300000300000008000000010000003200000004000000ff00000084c40000020000000200000004000000040000000600000002000000050000000800000001010000060000005b000000008000009822057f00010000ffffff7f0080000000040000f8ffffff020400000300000002000000b6030000000000000800000000000000070000000000000001000000030000000100000000000000ffffffff0300000006000000020000008420000000000000008000000300000000000000000000000100000005000000f80c00000300000016000000eb00000008000000e50900000010000008000000ff0f00000000008001000000b4000000ff000000010100001f000000d1000000fbffffff0200000005000000060000000a0900000700000002000000060000000100000001000080010000000000f03f000000000300000003000000f300000003000000010001000100000000000000030000002cd00000000000000300000003000000040000000200000081000000090000000300000009000000000000000002000001000100010000001f00000005000000090000001f000000fdffffff0900000000feffff0800000029d7000006000000e40e000002000000ff010000060000000501000000040000020000000002000000000000060000000300000002000000020000000000000000000000ccffffff02000000faffffff0100000007000000000000000080000003000000f5000000010000000700000003000000810000000000000000000000ff070000ff7f000004000000c1ffffff03000000ff0f0000c00f0000ff070000fbffffff730d0000030000004c230000080000007f000000df000000fffffffffb08000002000000ffffff7f0801000001010000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff0000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000200000073797a30000000000000000000000000000000000000000000000000650000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000fcffffff0000000003000000120000008100697036746e6c3000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f7465616d000000766c616e300000000000000000000000aaaaaaaaaaaa00ffff00ff000180c200000300ffffff00000000e8000000500100008801000064657667726f75700000000000000000000000000000000000000000000000001800000000000000010000000000000004000000ff07000005000000000000006d616300000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff000001000000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000434f4e4e5345434d41524b000000000000000000000000000000000000001000080000000000000002000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa1d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000200000011000000010000008bff69703667726530000000000000000000626f6e643000000000000000000000006272696467655f736c6176655f31000079616d30000000000000000000000000000000000000005e0000ffffd3640daf5c080000ff0000ff0000e8000000e80000002001000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe80000000000000000000000000000afe8000000000000000000000000000aaff000000ffffff00ffffffff000000ff000000ff00000000ffffff0000000000003a0a204e204e244e214e2400000000736e61740000000000000000000000000000000000000000000000000000000010000000000000001a7a3e637a650000fdffffff000000001d00000040000000680573797a5f74756e0000000000000000006e657464657673696d30000000000000767863616e310000000000000000000074756e6c300000000000000000000000ffffffffffff0000000000fe000000000000ffff0000ffff00007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000005b018d1548d616cdfdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000006000000fcffffff0200000009000000fad864949bfd6272696467655f736c6176655f3100006c6f00000000000000000000000000006361696630000000000000000000000062637368300000000000000000000000aaaaaaaaaaaaff0180000000000000aaaaaa00ffffffff00000070000000e0000000100100006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c200000e0000ffffffff00000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c20000000000ffffffff00000000434f4e4e5345434d41524b000000000000000000000000000000000000000000080000000000000001000000000000001900000062000000000364756d6d7930000000000000000000006263736830000000000000000000000076657468315f746f5f7465616d00000076657468315f746f5f7465616d000000ffffffffffff0000ff00ff0000000000000000ff0000ff0000002001000058010000900100007374700000000000000000000000000000000000000000000000000000000000480000000000000008000000ed00010002000180c20000000000ffffffff0000060000000900000001000180000000000000000000ffff004e224e20ff030400070005003cfb0100000008002000010871756f74610000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000552c038b85140000ffffffff00000000736e61740000000000000000000000000000000000000000000000000000000010000000000000005eef1cca19810000ffffffff00000000"]}, 0x1460) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c4004000000030000000000000000634040010000000000000003000000000000000000000000000000000000000000000048000000000000005000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a687701000000", @ANYRES64=r5, @ANYBLOB="0100000000000000852a6466f6ffffff", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="066304400200000003630840", @ANYRES64=r6, @ANYBLOB="3a63b2d6", @ANYRES64=r7, @ANYBLOB="01000000000000000f630c40030000000400000000000000"], 0x94, 0x0, &(0x7f0000000300)="1773400d77dc03f2fe9b4931b139ca07c55dab5a61eafecae63dd80af506cfce5c7794595547d6c680230e69fb818f195bfe34ce43177f6aa4d654729f8728903d9a837098109ab42cffd8aecd4a272f9a2b21dcb8d8518546199da846dfa3994067399ebaa8a0561697898dc96e04b006c5f9a89b35168b78985aa04115eba50812f9574850b0a3e0c035aab3d82029f05e4650"}) write$P9_RATTACH(r1, &(0x7f0000000640)={0x14, 0x69, 0x2, {0x42, 0x0, 0x5}}, 0x14) 15:31:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) unshare(0x40000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x7) ioprio_set$pid(0x0, r2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) mlock(&(0x7f0000b9e000/0x4000)=nil, 0x4000) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="00030000000000000401000710fffffffa0201000081000000000000000401049d551344ce316e144b7f2a89980514695d477b159a116abd7ad65339c4aea2483d73d1ae1bcd317fcf82ddaa299f2252a002858c1ea229e40a686ce6365ee32e378a5a16250f6a10a2e745340cc31cdfd3b16cac5086fcdae016cf0d041eb1c0161a102d616b88e0c8157b64842ab519d2b4864f117a25c748986ca00a676a29b81858736be4b1dea04316725a735dc587f97ea3"], 0x20) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) 15:31:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) setpriority(0x0, 0x0, 0xb28a) 15:31:20 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 227.866402] binder: 9644:9646 unknown command -1359686397 [ 227.873947] binder: 9644:9646 ioctl c0306201 200002c0 returned -22 [ 227.888871] binder: 9644:9646 ioctl 6685 0 returned -22 15:31:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x80000) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) fsync(r3) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001240)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0xf4, 0x4, 0x3, 0x20, 0x6, 0x1717, "23655306753016c5026c93aada5dddbe577f55d537c43052d6b42e154cf0b7b351a49ad7e5580bdef9eb3bd6ea27507ce89aafc3806e0c5b9e269b4291769e2554737071af927de483c72675b01f035beea585711569b41880a4239e0c9298133da82273e894a57a12c88631437122cb556c7e101f1366f1a5c3712b481d7992d8ecc3833956b0f9e6e70fe6a91609cff962dfbd1798eb2c34356e221f66575b77a09027f5880f29a156633c036f1dffd22b8ff00ae2599e11443f78a01c895ec0a383f6876b6316326e961460b87fd27d1633f57dcdd6453cfd249a1bcf6cb76fa8f1fb38b7dd806c50d51fdc6073c691faeb3a"}, 0x20c) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0xffffffffffffff18) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) write$selinux_attr(r1, &(0x7f0000000340)='system_u:object_r:usbmon_device_t:s0\x00', 0x25) recvfrom(r2, &(0x7f0000000640)=""/69, 0xfffffffffffffecb, 0x10000, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x3, @local, 'bridge0\x00'}}, 0x9bac3803f786a29d) connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@unspec, 0xc) fcntl$getown(r1, 0x9) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000300)={'syzkaller0\x00', {0x2, 0x702b, @dev}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="220000001e00070700be5bcea13e07010af000a3baf9d825d08ced685bf41e0058c9", 0x22) 15:31:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:20 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x20, 0x8, 0x7}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 227.910803] binder: 9644:9646 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 15:31:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 227.943539] binder: 9644:9646 got transaction to invalid handle [ 227.961461] binder: 9644:9646 transaction failed 29201/-22, size 72-80 line 3117 [ 227.987793] binder: 9644:9646 unknown command -1359686397 15:31:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 228.001391] binder: 9644:9669 ioctl 6685 0 returned -22 [ 228.017310] binder: 9644:9677 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 228.030893] binder: 9644:9646 ioctl c0306201 200002c0 returned -22 [ 228.063015] binder: 9644:9677 got transaction to invalid handle [ 228.089844] binder: 9644:9677 transaction failed 29201/-22, size 72-80 line 3117 15:31:21 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='net/xfrm_stat\x00') readahead(r1, 0x1, 0xfffffffffffffffd) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 15:31:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0x9) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x800) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') recvfrom$inet6(r2, &(0x7f0000000440)=""/114, 0x72, 0x10000, &(0x7f00000004c0)={0xa, 0x4e23, 0x2620, @empty, 0x1dd2}, 0x1c) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x900080}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc52}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x28f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x34e6}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 15:31:21 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:21 executing program 4: socket$inet6(0xa, 0x3, 0x9) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240), 0x4) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = gettid() setreuid(0x0, 0x0) mkdirat(r0, &(0x7f0000000880)='./file0/file0\x00', 0x8) getpeername$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x0) r2 = memfd_create(&(0x7f0000000a80)='\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18', 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf8d) setpgid(r1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)={@initdev, @empty, @loopback}, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000380)=0xc) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000600)=0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x4440, &(0x7f0000000640)=ANY=[@ANYBLOB='mode=00000000000037777777777,mode=00000000000000000000002,mode=00000000000000000000002,uid=', @ANYRESDEC=r3, @ANYBLOB=',fowner>', @ANYRESDEC=r4, @ANYBLOB="2c66736d616769633d30783030303030303030478cf2f37aef30303030303037352c7375626a5f757365722b6c6f6370757365742c726f6f74636f6e086578743d73797374656d5f752c6f626a5f726f6c653d627066002c6f626a5f726f6c37737761532e63757289c942abe5c17c91a23e38826100000000000000009ae3d5e66305def4da6b8b916834d1cedfcf3f1c05ee3f5b8cb254c1d5f0a616a364b3af703e1f50e72b7567b807901b"]) setxattr$security_ima(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='security.ima\x00', &(0x7f0000000840)=@md5={0x1, "b61f57b0755eac2ab56a4dc55c00bc8d"}, 0x11, 0x2) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="1c6270660000d39ea615760fd8b2ee2566611762b49863e2f3478603000000"], 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 15:31:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:21 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:21 executing program 5: pselect6(0xe, 0x0, &(0x7f00000000c0)={0x1}, 0x0, 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x8, 0x8030, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) fsetxattr(r2, &(0x7f0000000100)=@random={'user.', '/selinux/checkreqprot\x00'}, &(0x7f0000000140)='/\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 228.423759] binder: 9687:9691 BC_FREE_BUFFER u0000000000000000 no match [ 228.456133] binder: 9687:9691 ioctl 40087602 20000200 returned -22 15:31:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 228.513155] binder: 9687:9691 BC_FREE_BUFFER u0000000000000000 no match [ 228.520647] binder: 9687:9706 ioctl 40087602 20000200 returned -22 15:31:21 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:21 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:21 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x5, 0x9, 0x8, 0x9909}) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 15:31:21 executing program 4: socket$inet6(0xa, 0x3, 0x9) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240), 0x4) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = gettid() setreuid(0x0, 0x0) mkdirat(r0, &(0x7f0000000880)='./file0/file0\x00', 0x8) getpeername$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x0) r2 = memfd_create(&(0x7f0000000a80)='\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18', 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf8d) setpgid(r1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)={@initdev, @empty, @loopback}, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000380)=0xc) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000600)=0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x4440, &(0x7f0000000640)=ANY=[@ANYBLOB='mode=00000000000037777777777,mode=00000000000000000000002,mode=00000000000000000000002,uid=', @ANYRESDEC=r3, @ANYBLOB=',fowner>', @ANYRESDEC=r4, @ANYBLOB="2c66736d616769633d30783030303030303030478cf2f37aef30303030303037352c7375626a5f757365722b6c6f6370757365742c726f6f74636f6e086578743d73797374656d5f752c6f626a5f726f6c653d627066002c6f626a5f726f6c37737761532e63757289c942abe5c17c91a23e38826100000000000000009ae3d5e66305def4da6b8b916834d1cedfcf3f1c05ee3f5b8cb254c1d5f0a616a364b3af703e1f50e72b7567b807901b"]) setxattr$security_ima(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='security.ima\x00', &(0x7f0000000840)=@md5={0x1, "b61f57b0755eac2ab56a4dc55c00bc8d"}, 0x11, 0x2) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="1c6270660000d39ea615760fd8b2ee2566611762b49863e2f3478603000000"], 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 15:31:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 15:31:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = socket(0x9, 0x0, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x84, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = getuid() lseek(r2, 0x0, 0x6) fcntl$getownex(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setaffinity(r5, 0x8, &(0x7f0000000440)=0x8) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup2(r0, r0) ioctl$RTC_PIE_ON(r7, 0x7005) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$chown(0x4, r1, r4, r6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e31e55fb8bb53bd007908d969a62b16dc2535188dbdc55b20a3c93e65569512aa09f998ab02ef4ef404ca7e85a135ab4857ce3c71711e5d0636b4272542670c89c2a710afcd917aa453edcda407c88f6325e08eda5739e7cf658769f356c4d42e811912fe89b265cbdf6293dc1fbb038ba59369e494996574960def1748e06f3aeaf7dbc9f2c4f46e824ebeab41d20dd93506ec3e51be8d7d07f1a081d9054601319c93a7f137eebb02e179ee25d694d98ff2acae412", @ANYRES64=0x0], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) [ 228.728789] binder: 9715:9718 BC_FREE_BUFFER u0000000000000000 no match 15:31:21 executing program 1: socket$inet6(0xa, 0x3, 0x9) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240), 0x4) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = gettid() setreuid(0x0, 0x0) mkdirat(r0, &(0x7f0000000880)='./file0/file0\x00', 0x8) getpeername$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x0) r2 = memfd_create(&(0x7f0000000a80)='\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18', 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf8d) setpgid(r1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)={@initdev, @empty, @loopback}, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000380)=0xc) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000600)=0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x4440, &(0x7f0000000640)=ANY=[@ANYBLOB='mode=00000000000037777777777,mode=00000000000000000000002,mode=00000000000000000000002,uid=', @ANYRESDEC=r3, @ANYBLOB=',fowner>', @ANYRESDEC=r4, @ANYBLOB="2c66736d616769633d30783030303030303030478cf2f37aef30303030303037352c7375626a5f757365722b6c6f6370757365742c726f6f74636f6e086578743d73797374656d5f752c6f626a5f726f6c653d627066002c6f626a5f726f6c37737761532e63757289c942abe5c17c91a23e38826100000000000000009ae3d5e66305def4da6b8b916834d1cedfcf3f1c05ee3f5b8cb254c1d5f0a616a364b3af703e1f50e72b7567b807901b"]) setxattr$security_ima(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='security.ima\x00', &(0x7f0000000840)=@md5={0x1, "b61f57b0755eac2ab56a4dc55c00bc8d"}, 0x11, 0x2) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="1c6270660000d39ea615760fd8b2ee2566611762b49863e2f3478603000000"], 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 15:31:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 15:31:21 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') futimesat(r1, &(0x7f0000000380)='./file0\x00', 0x0) r2 = dup2(r0, r0) r3 = getpid() r4 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f00000007c0)=0xc) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000980)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000ac0)=0xe8) r10 = getegid() sendmsg$unix(r2, &(0x7f0000000bc0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000001c0)="37a01fb0c049ff2350eeaa219abae2b153011bc521204ed7a95b2477fb9d02d0ea55e776840897860de5b60dcd67223ba3530cc14395cdce70966025f195247a1ab557cbca17e3a6890d4887df5b07a78e0b18a5a54556706db6e3d1b3c01c2b6626fbc6dbbe6b9966681d56a1b4eabf52ea81a7f9a2e64da86da36e05bc02836ba4ec7699e340e425d2d8c4c1ba66dad46e952085869e47a7751c5ea4e52ff07aa17ad3c6171bb416648e668f5b88d2baa020ddd186c89870d858b28a382daed85aafac2b0d267b6de24a20f33d23", 0xcf}, {&(0x7f00000002c0)="86807d992325c952c1a2619c6b9e511565ad8059e6aaf5a34eed24f873050a81f2f01ee055e89835a309d83cc5ed6f628737a03e8c00e7c8442fa0c76933e90954a5ffd1c425eb998616c1a4214cda0b1a73388d05ffb54a", 0x58}, {&(0x7f00000003c0)="3f6b8ce16fade5248f0c41640f263acf3210942e10d0579248ab65502f9472d4affad9b9041c93d608fba686796e89c175dea5413bf02df53e771193fb6c779303e2d8df4ead2660f130c60cc32ea5501f5852d9ee47308e69f8ee589e1c538dcb2dbf2548e0a6bc2b43374d041f96169a51c3401ae3d6b66e31b4f7ef020f521fd45a196c48e3f30f22bee2b82060252a3e5db8", 0x94}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000580)="a98927000fc11510e991483ac6a0a2b8f899c0cd4712e683ed7410b754e2d3499ce64d150693ab9d717645c6751c2c6fac6c0ea9e0fe37ed21c27c25e35615b95fedaab35964bd82b4d2a3dc08aa292e16fd58f5b60da19387d1ac1a49e9", 0x5e}, {&(0x7f0000000600)="b7cf65920596d6803d783f6378684b217f5f40c275888e1b19148ddbf5a6312368a9b44a5e82d383759bc156001d0af8e79571a7b37aa7f850be898d24eb040a3673da330ca01986683bce7eb4aea2fb16e51b475bae66ef023cc1d0389f5343cb6b0b6807a68023b53cdbace9c23a39dd4dd2fda02e1d078a0b773d42d272c188981a2a98bde38bff4c9110eab3ba465846b31f4c75d1c4831bbf85b6c7931f72", 0xa1}, {&(0x7f00000006c0)="54b8b1472a892d3b9415d124b54c56a560e16d63c27f8f6b54099aa75037dd21d5de134312bcf15e100e1680e9ea6dac1d2efd60b291289c2b8a5e24a45b10b8321e0b473a2fc408d765377842a6cb147f8e", 0x52}], 0x7, &(0x7f0000000b00)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r1, r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xc0, 0x8091}, 0x4) [ 228.890890] binder: 9730:9734 ioctl 7005 0 returned -22 [ 228.899030] binder: 9730:9734 unknown command -78307613 [ 228.928492] binder: 9730:9734 ioctl c0306201 200002c0 returned -22 [ 228.946851] binder: 9730:9744 ioctl 54a0 0 returned -22 [ 228.991280] binder: 9730:9744 ioctl 7005 0 returned -22 [ 228.991353] binder: 9730:9748 unknown command -78307613 [ 229.015313] binder: 9730:9748 ioctl c0306201 200002c0 returned -22 [ 229.029955] binder: 9730:9734 ioctl 54a0 0 returned -22 15:31:22 executing program 5: pselect6(0xe, 0x0, &(0x7f00000000c0)={0x1}, 0x0, 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x8, 0x8030, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) fsetxattr(r2, &(0x7f0000000100)=@random={'user.', '/selinux/checkreqprot\x00'}, &(0x7f0000000140)='/\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:31:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 15:31:22 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net\x00\x00\xf0\xff\x00\x00') write$UHID_CREATE(r1, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/140, 0x8c, 0xffffffff7fffffff, 0x10001, 0x6, 0x6, 0x4}, 0x120) read(r1, &(0x7f00000004c0)=""/66, 0x16c1ad2b5c04c24f) ptrace(0x4208, r0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000240)={'dummy0\x00', @ifru_hwaddr=@local}}) getdents64(r1, 0x0, 0x0) 15:31:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) timer_create(0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}}], 0x1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x3f}, {0x5, 0x100000000, 0x8ba, 0x8001}]}) prctl$PR_GET_NO_NEW_PRIVS(0x27) write$P9_RWALK(r1, &(0x7f0000001340)={0x3d, 0x6f, 0x2, {0x4, [{0x14, 0x4, 0x8}, {0x22, 0x3, 0x7}, {0x42, 0x4, 0x7}, {0x2, 0x2, 0x7}]}}, 0x3d) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000001380)=""/196) ftruncate(r3, 0x80003) recvmmsg(r2, &(0x7f0000003080)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/151, 0x97}], 0x2, &(0x7f0000002040)=""/4096, 0x1000}, 0x800}, {{&(0x7f00000016c0)=@ax25={{0x3, @rose}, [@netrom, @null, @remote, @default, @rose, @default, @null, @null]}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001740)=""/9, 0x9}, {&(0x7f0000001780)=""/129, 0x81}, {&(0x7f00000018c0)=""/205, 0xcd}], 0x3}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/221, 0xdd}, {&(0x7f0000001f00)=""/89, 0x59}, {&(0x7f0000008540)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/76, 0x4c}], 0x4, &(0x7f0000003040)=""/61, 0x3d}, 0x6}], 0x3, 0x40000000, &(0x7f00000031c0)) 15:31:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4000000007fe) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setreuid(r1, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 15:31:22 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) mlock2(&(0x7f00002d6000/0x1000)=nil, 0x1000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x20000, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 15:31:22 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') setsockopt$inet_int(r0, 0x0, 0x3f, &(0x7f0000000040)=0x3, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x4, 0x77a, 0x2, 0x7}, {0x9, 0x2, 0x1ff, 0x5}, {0x39, 0xe016, 0x6, 0x5}]}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000140)={'filter\x00', 0x2, "0fbb"}, &(0x7f0000000180)=0x26) pipe(&(0x7f0000000080)) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 229.550350] binder: 9772:9773 BC_FREE_BUFFER u0000000000000000 no match 15:31:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="73cc58320e4326d36f974bfadcce8fc1d8a774b914e13c3f19e85943f9c4d43ca022912f404ef7455bd3e6b03a5f440a76d974b9ac940481923818e96c1ff3180a", 0x41}, {&(0x7f0000000100)="a9ac4d482ab9d206b767ec7ecdcf5d363b01a8a555b85a9b07eafdce27a2410ce34265ac27e4c14bb9abef6afd29a8c0d8de5ca4ddec97cb3c35baf06f4c64992d09689a41a42380e5ac132f1b2fab30dc2c428252f3645230510b7ceb3ea68a1737d164fab34d4645fba3ac73608a2fe72eea8b284aa23fa9f8cad773f2a1989588ddeb4f7a04e80af8ae42fc08e7f96da9a3a2c5916537f15292b6569a5c51a985c9888350daf41024eb02b6b1dcea6496cd81eec3c0fb2128fd7c8245a118776bf1", 0xc3}, {&(0x7f0000000080)="4817189b995d7d715c8a70a5c759b7c7a78a944b4f5c61fdd83bee59a71316e099014bb2b04a1e508e104e", 0x2b}], 0x3, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 15:31:22 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x22100, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socketpair(0xd, 0x4, 0xace7, &(0x7f00000000c0)) ioctl$void(r1, 0xc0045c79) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) [ 229.583644] audit: type=1400 audit(1553614282.289:55): avc: denied { map } for pid=9777 comm="syz-executor.0" path="/proc/9777/net/mcfilter6" dev="proc" ino=4026532294 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 [ 229.609977] binder: 9772:9782 BC_FREE_BUFFER u0000000000000000 no match 15:31:23 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x10, 0x100200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @empty}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', r2}) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcf0000b05829bf5a5c06bf67bcf376aec3c894eaefb7ee236bec5def00ffffffffffffffb960b100000000fe51c72915869fb6dd2622ea"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x4, r0, 0x9, 0x0) 15:31:23 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) r2 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, 0xffffffffffffffff, 0x26) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x68, 0x0, &(0x7f0000000080)=[@decrefs, @clear_death={0x400c630f, 0x3}, @dead_binder_done={0x40086310, 0x4}, @exit_looper, @free_buffer={0x40086303, r1}, @acquire_done={0x40106309, r2}, @clear_death={0x400c630f, 0x0, 0x1}, @clear_death={0x400c630f, 0x3, 0x1}], 0x2e, 0x0, &(0x7f0000000100)="ec78f0dff71d032bafef749d1ff5a97a9600e0b4d9242ac0c14df2748dbe7e99294187d444fc693096e4bac796dc"}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 15:31:23 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:23 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) capset(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000140)={0x80000001, 0xfffffffffffffffe, 0x0, 0x81, 0x101, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', r1}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @local, 0x20000000000006}, 0x1c) 15:31:23 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1fb) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0x44, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="448aee00", @ANYRES16=r1, @ANYBLOB="000c27bd7000ffdbdf250100000004000500080002000a0000000400f0ff070001004e2300000800040003000000080001004e220000080003003a000000"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40011) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:23 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000200)={0x4, 0x7, 0x80, 0x2, 0x5, 0xfff}) vmsplice(r1, 0x0, 0xfffffd5a, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0xce, 0xd32, 0x8, 0x5, 0x6bb, 0xffffffffffffe3f0}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x578) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x78) 15:31:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="08dc783a", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc2040, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 15:31:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={r1, r2, r3}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8918, &(0x7f00000003c0)={'veth0\x00', @ifru_ivalue=0x6}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.stat\x00', 0x0, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000480)=0x3) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000580)={0x1, 0x4, 0xffffffffffffff13}) getdents(r6, &(0x7f0000000100)=""/166, 0xa6) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffcc2, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x16}]}, 0x30}}, 0x0) r7 = request_key(&(0x7f00000004c0)='blacklist\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='/dev/null\x00', 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r7, 0x0) 15:31:23 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/checkreqprot\x00', 0x10000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x10e) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='|puacct.usage_pe2cpu_sys\x9e', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000001200)=ANY=[@ANYBLOB="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"], @ANYRES16=r1]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8000, 0x4e24, 0x1b7, 0xa, 0x0, 0x20, 0x77, r2, r3}, {0xffffffff, 0x1000, 0x3, 0x10001, 0xffffffffffffffcf, 0x9, 0x4, 0x100000001}, {0x0, 0x1, 0x5, 0x2c7b}, 0x7, 0x6e6bb5, 0x2, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3503, 0x3, 0x1, 0x2, 0x21a, 0x5f3, 0x899d}}, 0xe8) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r5 = getuid() sendmsg(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x519}], 0x1, 0x0, 0x0, 0x800}, 0x44804) read(r4, &(0x7f0000000200)=""/225, 0xe1) shutdown(r4, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r4) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) unlink(&(0x7f0000000b40)='./file0\x00') lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)) geteuid() setresuid(r3, r5, r5) pipe2(&(0x7f0000000c40), 0x4000) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) getpid() 15:31:23 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x11, 0x21, 0x5, 0x12, 0x4, 0x3f, 0x5, 0x4e}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendfile(r2, r2, &(0x7f0000000000), 0xfd) listen(r0, 0xf0b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 230.502715] binder: 9814:9820 unknown command 980999176 [ 230.516495] binder: 9814:9820 ioctl c0306201 200002c0 returned -22 [ 230.525602] binder: 9814:9820 unknown command 980999176 [ 230.533484] binder: 9814:9820 ioctl c0306201 200002c0 returned -22 15:31:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x1f, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES64=0x0], 0x0, 0x0, 0x0}) syz_read_part_table(0x1, 0x6, &(0x7f0000000500)=[{&(0x7f0000000040)="18e624a97576f31aade594c3254ba1c5dfc75a5f1d3c13cff719a0f14b4771dbfc8d32e7b690861fac2624c06c2a5c224724f0a9ff98ea327a8cd65f43446604b0e1270ce05ffa47d8b53baec0550bcb6c681a3a2b1b7faace0e60676f609327e008bcc4bc01fc14febf4d240a3a514227be14076e99466a54b5471e2632aa85ef29bce9a65f502b0562efbac978dfa17a51109f", 0x94}, {&(0x7f0000000180)="7b6c11203cf33223e85270831b7936f1272f2e5f35cd17111197862f31da095b56333887322aff74a0d60249a1a21e25517fb5500a2ffcf132f43a7f26164883c9f841d6c6a50885e79071a0b204f7247ac4210a8f826c6d235277c60adfac120b48a3d35586ffc4fa53ee9933033913fb7c7d4840353ff8c67f19b1f836429bc56411c356c489685fad4a302a9c19840061b0a998d572732cc895fa7ae03cdd3e0d48aed046e1186f", 0xa9, 0x9}, {&(0x7f0000000100)="2ace0922b1de5c5b23d7bbb42895f3add974b6b1518056e50fa800878fc036ff6e98cf680af2811303b5a75671dd315e8eeeb397a0", 0x35, 0x3b74e84b}, {&(0x7f0000000300)="d9b9925835e771ff7f49a5c37c41034bee2a562051c07347f605a551e415bf7e0e34dcfb196bdfab13c84a8e8647292665c54f2408af6417f2c570aa5af29b574ecac1f705cb5340fb751affb2d13802e01916915ebbe4df227a13a782ce45871d452cb95995d8d4e2635b539174cde3397284a527e6dbb585649498137887c91b74c6724c78370c53d1f658dc8c33968ab9cc50d8a055811286e5124d106ca08c74197b27bbf14aa84759df72d96967b944e43babde2c11cf9a127c0541223402df29438bf11dafbda32e02d50b9010c8bb7f9e3a980205d19acad5620d2ab7d324167b9118dbb5034bbccf7ea960274bb5", 0xf2, 0x2}, {&(0x7f0000000400)="933cc7039702f1cab84bd6dec5b7b44108b660543faf3b361d209608170e7edfde44ec9b317cb20b4435228cbadaae7211854f20f37526ee6ec804db2128a36815c45e8d45944e31a016914bc7c36b868b0bdbff103aba7d807546e72f873de75bc5460415c0f2cc59f9b70cb0cc83b27f8225cadb77c1f42e6569ac8bb8c02753e677cdc865f51368d1b9723ff8ec4c0b94c5731cd4ddfd54fbf89c4becd7e3561a97fafab285153f09d67fd49188764c060c2996943598ce4bdf212f40d8db1ae70be46afde42bdb4f", 0xca, 0x6}, {&(0x7f0000000240)="611d5bb2542d7ca6b27eca8ab61803ab3d62050e1e8c8c4603bfd37990c984eb4cc20ca4a8ef1ce5e76c401a813b634d7ce66c982e6089fc5ea280d80a51315f8eb7a8407541ff", 0x47, 0x8}]) dup2(r0, r0) 15:31:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socketpair(0x11, 0x80004, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x9, 0x4) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:23 executing program 1: seccomp(0x1, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x10200000006, 0x0, 0x0, 0x7ff00000}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1400008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 230.608366] audit: type=1400 audit(1553614283.309:56): avc: denied { create } for pid=9824 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 230.624862] binder: 9846:9848 unknown command 926363952 15:31:23 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x26e, 0x0) [ 230.676577] binder: 9846:9848 ioctl c0306201 20000140 returned -22 15:31:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 230.723752] audit: type=1400 audit(1553614283.339:57): avc: denied { write } for pid=9824 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 15:31:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x80000001, 0xffffffff00000000, 0x7, 0x802}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x16) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840da", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x1000}, 0xb) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 230.773257] binder: 9846:9848 unknown command 926363952 [ 230.783307] binder: 9846:9848 ioctl c0306201 20000140 returned -22 [ 230.877351] binder: 9878:9881 BC_FREE_BUFFER u00000000000000da no match [ 230.919993] binder: 9878:9881 BC_FREE_BUFFER u00000000000000da no match 15:31:24 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x10f, 0xffffffffffffff81, 0x20, 0x1f3, 0x2fe, 0x8, 0x24, 0x81}, "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", [[], []]}, 0x31e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x9, 0x10) 15:31:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000180)={{0x0, 0x3, 0x86b, 0x1, 0x1000}, 0x7f, 0x3f, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x3f, 0x8, 0x2}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10200, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x100000000, 0x2, 0x1, 0x1, 0x5}) [ 231.364892] binder: 9894:9897 BC_FREE_BUFFER u0000000000000000 no match [ 231.385320] audit: type=1326 audit(1553614284.089:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45b06a code=0x7ff00000 15:31:24 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000200)={0x4, 0x7, 0x80, 0x2, 0x5, 0xfff}) vmsplice(r1, 0x0, 0xfffffd5a, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0xce, 0xd32, 0x8, 0x5, 0x6bb, 0xffffffffffffe3f0}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x578) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x78) 15:31:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400a00, 0x0) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) [ 231.387329] binder: 9894:9897 BC_FREE_BUFFER u0000000000000000 no match 15:31:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x6, 0x8000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:24 executing program 5: io_setup(0x100000080007, &(0x7f0000000140)) socketpair(0x5, 0x2, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) [ 231.514350] audit: type=1326 audit(1553614284.089:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x411f01 code=0x7ff00000 15:31:24 executing program 1: restart_syscall() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4302, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/137, 0x89, 0x10000, &(0x7f0000000100)={0xa, 0x4e24, 0x8001, @dev={0xfe, 0x80, [], 0x21}, 0x5}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x4, 0x5, 0x5, 0x0, 0xe}) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000300)='vxcan1\x00') r2 = request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0x2, 0x2, r2) 15:31:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802123001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000d40)={0x7, 0x10, 0x8000000000008}) write$selinux_load(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) setxattr$security_smack_entry(&(0x7f0000000380)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="7d1fc4a43bfbae6fc9fea32dd18742b9ee469c4c1e56e9c8b22eff63bfd53bd9b54f7d6621812070aa3ed7714bdc16c13520e705c9290dc569dfcb330262532ebf8c64053c2997951777942cc164627a30e3be741a9160f0591b060089addb55e1c0af02000000000000cf89fb51cd42dfabe96fa1de99ded786ec6abd654a5f0859fa0d3abd51c7b4625d55ab53c3d7009080af9ec6c82fedfc4ade431ffccb604dfe71b276f19ccb7daa9a1dc00710d8f8aa40395374ab85226babf54fac010c95ce294d519ee921e861084dd97816c06639b249b293f84768276947f20318eeb8bafdf701fa6273e9f1a424581c513907000000"], 0xf5) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000700)) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000b40)) stat(&(0x7f0000002040)='./bus\x00', &(0x7f0000002080)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc, 0x0}, 0x20000000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x48d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000900)=0x9) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239) r3 = add_key(&(0x7f00000003c0)='trusted\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e40)={'syz', 0x0}, &(0x7f0000000e80)='wlan0]\'\x00', r3) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000940), 0x3c9, r4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 15:31:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 15:31:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 15:31:24 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) r0 = request_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0xfffffffffffffffa) keyctl$read(0xb, r0, &(0x7f0000000280)=""/94, 0x5e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000140)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) fdatasync(r1) recvmmsg(r2, &(0x7f00000020c0), 0x15e, 0x0, &(0x7f0000000000)={0x77359400}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) [ 231.617433] audit: type=1326 audit(1553614284.089:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x411f01 code=0x7ff00000 [ 231.676727] binder: 9929:9934 BC_FREE_BUFFER u0000000000000000 no match [ 231.680658] audit: type=1326 audit(1553614284.089:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=231 compat=0 ip=0x458209 code=0x7ff00000 [ 231.719347] audit: type=1326 audit(1553614284.179:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45b06a code=0x7ff00000 [ 231.727852] binder: 9929:9934 BC_FREE_BUFFER u0000000000000000 no match [ 231.758414] audit: type=1326 audit(1553614284.179:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x411f01 code=0x7ff00000 [ 231.791756] audit: type=1326 audit(1553614284.179:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x411f01 code=0x7ff00000 15:31:24 executing program 3: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f0000000540)=0xffffffffffffff19) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x420000, 0x3b) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7000ffffffff010000000800020002000000080001004e200000080078c5f184ad11973301004e210000080001004e24000004000500080002000a0000000800040001000000080002000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000005c0)="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") sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c5}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x2b, &(0x7f00000000c0)=""/40, &(0x7f00000001c0)=0x28) accept4$packet(r6, 0x0, &(0x7f0000000040), 0x80000) pwritev(r4, 0x0, 0xfffffffffffffe65, 0xffffffff7fffffef) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000080)) 15:31:24 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r0) r5 = dup(r4) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000100)=""/142) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r6 = dup2(r2, r0) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000003b60848e556403766206f6efe8d7b3065b3396e470a609c102529094952adaa463373cb85ad1de7161d109cea56aa11bf981283a26bc06bed0ed74f73c0c67dad1d935e7ea12141094dca3a497674b87728f4ad38b48c18b1e6513b0d68c53056fbb4806cb6b37ebf8852e203ca62e45dc190ce0ede119fafc95e66a5c33bf24750c3e22"], 0x78}, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000000)={0x3995, 0x25, "4fe09285f56ba0c1576c1d4dfb22b33f5154a8c4766c55c48f8c83aa3a36e30e52ffe90a77"}) pread64(r3, &(0x7f0000000280)=""/144, 0x90, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0xb, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 15:31:24 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000380)='security.evm\x00', &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="437d60cc4c"], @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64=r1], @ANYRESHEX=0x0], @ANYRESDEC=r3], 0x7, 0xffffffffffffffff) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000440)={'bond_slave_0\x00'}) r6 = socket(0xa, 0x100000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'erspan0\x00', 0x4}, 0x18) ioctl(r6, 0x8916, &(0x7f0000000000)) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2000000000806, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3f, &(0x7f0000000240)=""/230, &(0x7f0000000000)=0xe6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000180), 0x4) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x2) ioctl$PPPIOCDISCONN(r8, 0x7439) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r9, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @remote}, 0x2, 0x0, 0x2, 0x1}}, 0x80) sendmmsg(r5, &(0x7f0000004600)=[{{&(0x7f0000004200)=@in={0x2, 0x4e22, @multicast2}, 0x80, &(0x7f00000043c0)}, 0x7}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=0x0) sched_setscheduler(r10, 0x3, &(0x7f00000003c0)=0x2) getdents(r1, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x9) mkdirat(r1, 0x0, 0x0) 15:31:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410001, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x541, 0x4) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/validatetrans\x00', 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x1010, r1, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4) r4 = request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='syzkaller\x00', 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x6032, r0, 0x9) syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0)='NET_DM\x00') sendto$inet(r2, &(0x7f0000000240)="d0ae064a3cb81da1b985afd577757201ed98fe4f593a3ce1454b24bba0d7db36b01446f7ff229035bd3c05b1d2a95aebd193b1783c4c1a6fb0a68f06d41d6b707967824671982185e329c68a2b39710afbe828d7e62087bc514bdec65208c0bc055b38f89d68a4957bb0a73c37d3a65d", 0x70, 0x1, &(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), 0xfffffffffffffd5d, 0x0, 0x0}) 15:31:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7768f5d20ce89a06d480ce188c96e5d4ea3865d51c2400c6181a9220ed33d239b3060e64c52a8e29ac23af3a0b9d5fc70b7c9dfb5425c06cd311a0b7a648a0e35fb20b696c65018079474bb5e1f39b1ca931c1d866a9e30c1f7ef6c482b6d402f95c8fc936c5a6fcd09d4cd5262b90a096553c01aa68ef21aab059814f2989f3adb1c1396514c904e1e6291c9f825816d56dcac38fa87812aa2e9687553e9b8718227e8ecc3332eec1e12ecd820f7762"}, 0xb4) 15:31:25 executing program 1: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) setns(r2, 0x42000000) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000d2c000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r3}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r4}) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB]) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) 15:31:25 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0xff) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03120041", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 232.408836] binder: 9984:9987 unknown command 1090523651 [ 232.414911] FAT-fs (loop1): bogus number of reserved sectors [ 232.424816] binder: 9984:9987 ioctl c0306201 200002c0 returned -22 [ 232.435583] FAT-fs (loop1): Can't find a valid FAT filesystem 15:31:25 executing program 4: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f0000000540)=0xffffffffffffff19) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x420000, 0x3b) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7000ffffffff010000000800020002000000080001004e200000080078c5f184ad11973301004e210000080001004e24000004000500080002000a0000000800040001000000080002000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000005c0)="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") sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c5}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x2b, &(0x7f00000000c0)=""/40, &(0x7f00000001c0)=0x28) accept4$packet(r6, 0x0, &(0x7f0000000040), 0x80000) pwritev(r4, 0x0, 0xfffffffffffffe65, 0xffffffff7fffffef) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000080)) 15:31:25 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/13) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'team_slave_1\x00', 0x2400}) 15:31:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket(0x0, 0x1, 0x4) getpeername$inet6(r1, 0x0, &(0x7f0000000240)) recvfrom(0xffffffffffffffff, 0x0, 0x191, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000340)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000280), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xbd7}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) syz_open_procfs$namespace(r3, &(0x7f0000000400)='ns/net\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getcwd(&(0x7f0000000300)=""/139, 0x8b) write$P9_RGETATTR(r4, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x10, {0x40, 0x1, 0x5}, 0x1, r5, r6, 0x1800, 0x5, 0x7f, 0x0, 0x6c, 0x8001, 0x9, 0x871, 0x8, 0x7, 0x7, 0x5, 0xffff, 0x1, 0x3}}, 0xa0) setsockopt$inet6_opts(r4, 0x29, 0x3f, &(0x7f0000000440)=@srh={0x3a, 0xa, 0x4, 0x5, 0x4, 0x10, 0x7b95cf34, [@ipv4={[], [], @multicast1}, @rand_addr="b95e6d043e2644a7b2c8dd332e5ac718", @loopback, @local, @ipv4={[], [], @multicast1}]}, 0x58) 15:31:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20400, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 15:31:25 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000380)='security.evm\x00', &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="437d60cc4c"], @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64=r1], @ANYRESHEX=0x0], @ANYRESDEC=r3], 0x7, 0xffffffffffffffff) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000440)={'bond_slave_0\x00'}) r6 = socket(0xa, 0x100000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'erspan0\x00', 0x4}, 0x18) ioctl(r6, 0x8916, &(0x7f0000000000)) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2000000000806, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3f, &(0x7f0000000240)=""/230, &(0x7f0000000000)=0xe6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000180), 0x4) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x2) ioctl$PPPIOCDISCONN(r8, 0x7439) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r9, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @remote}, 0x2, 0x0, 0x2, 0x1}}, 0x80) sendmmsg(r5, &(0x7f0000004600)=[{{&(0x7f0000004200)=@in={0x2, 0x4e22, @multicast2}, 0x80, &(0x7f00000043c0)}, 0x7}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=0x0) sched_setscheduler(r10, 0x3, &(0x7f00000003c0)=0x2) getdents(r1, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x9) mkdirat(r1, 0x0, 0x0) 15:31:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x33b383c, 0x39f, 0x341bf8e9, 0xfffffffffffff001}, 'syz1\x00', 0x4a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 232.630441] binder: 10018:10021 BC_FREE_BUFFER u0000000000000000 no match 15:31:25 executing program 4: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f0000000540)=0xffffffffffffff19) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x420000, 0x3b) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7000ffffffff010000000800020002000000080001004e200000080078c5f184ad11973301004e210000080001004e24000004000500080002000a0000000800040001000000080002000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000005c0)="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") sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c5}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x2b, &(0x7f00000000c0)=""/40, &(0x7f00000001c0)=0x28) accept4$packet(r6, 0x0, &(0x7f0000000040), 0x80000) pwritev(r4, 0x0, 0xfffffffffffffe65, 0xffffffff7fffffef) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000080)) 15:31:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 15:31:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02630840", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 232.733196] binder: 10026:10027 BC_FREE_BUFFER u0000000000000000 no match [ 232.761290] binder: 10026:10027 BC_FREE_BUFFER u0000000000000000 no match 15:31:25 executing program 4: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f0000000540)=0xffffffffffffff19) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x420000, 0x3b) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7000ffffffff010000000800020002000000080001004e200000080078c5f184ad11973301004e210000080001004e24000004000500080002000a0000000800040001000000080002000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000005c0)="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") sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c5}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x2b, &(0x7f00000000c0)=""/40, &(0x7f00000001c0)=0x28) accept4$packet(r6, 0x0, &(0x7f0000000040), 0x80000) pwritev(r4, 0x0, 0xfffffffffffffe65, 0xffffffff7fffffef) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000080)) [ 232.828278] binder: 10034:10036 unknown command 1074291458 [ 232.852057] binder: 10034:10036 ioctl c0306201 200002c0 returned -22 [ 233.092292] FAT-fs (loop1): bogus number of reserved sectors [ 233.105613] FAT-fs (loop1): Can't find a valid FAT filesystem 15:31:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="036308407586147bf69736f753c4bb06305163887b8f71bada396d6cf64a718b8875f60089ca84d925f3df46d48af2c3fcbf3f88c9f3dc2594ea027bec460468d580ebae790d5cf4911c53e2cccfbf3d1a022ecb4dde0f3278b857ec44738fd87093f34d21096513f87b4bc90000000000000000", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 15:31:26 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='/dev/input/event#\x00', 0xffffffffffffffff) 15:31:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000100)=""/14, &(0x7f0000000140)=0xe) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1000000000000191, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 15:31:26 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:31:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000380)='security.evm\x00', &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="437d60cc4c"], @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64=r1], @ANYRESHEX=0x0], @ANYRESDEC=r3], 0x7, 0xffffffffffffffff) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000440)={'bond_slave_0\x00'}) r6 = socket(0xa, 0x100000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'erspan0\x00', 0x4}, 0x18) ioctl(r6, 0x8916, &(0x7f0000000000)) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2000000000806, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3f, &(0x7f0000000240)=""/230, &(0x7f0000000000)=0xe6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000180), 0x4) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x2) ioctl$PPPIOCDISCONN(r8, 0x7439) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r9, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @remote}, 0x2, 0x0, 0x2, 0x1}}, 0x80) sendmmsg(r5, &(0x7f0000004600)=[{{&(0x7f0000004200)=@in={0x2, 0x4e22, @multicast2}, 0x80, &(0x7f00000043c0)}, 0x7}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=0x0) sched_setscheduler(r10, 0x3, &(0x7f00000003c0)=0x2) getdents(r1, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x9) mkdirat(r1, 0x0, 0x0) 15:31:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x4000000000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="25ea54279cf13d96347f7819b18cd39f27b410544eff8b41fd761e132ca5819973682922dd8a4cde9525ca20c50f61d3338b537932abc6", 0x37}], 0x0) syslog(0xb, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 15:31:26 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r0, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setregid(0x0, 0x0) 15:31:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x9, 0x0, &(0x7f0000000140), 0xfffffffffffffe04, 0x0, 0x0}) [ 233.377508] binder: 10052:10055 BC_FREE_BUFFER uf73697f67b148675 no match 15:31:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x77622a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 15:31:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf) dup3(r1, r0, 0x0) 15:31:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x13, "2d1a72"}, 0x5, 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x2010) [ 233.455169] binder: 10065:10071 unknown command 0 [ 233.467539] binder: 10065:10071 ioctl c0306201 200002c0 returned -22 15:31:26 executing program 1: openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a6d656d6f3f00f29a61809e"], 0xc) 15:31:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = mmap$binder(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x2, 0x10050, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001940)={0x10c, 0x0, &(0x7f0000000800)=[@clear_death, @enter_looper, @clear_death={0x400c630f, 0x1, 0x4}, @reply={0x40406301, {0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x58, 0x28, &(0x7f0000000600)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x2, 0x31}, @flat={0x77682a85, 0xb, r1, 0x4}, @flat={0x77622a85, 0xb, r1, 0x8}], &(0x7f00000000c0)=[0x48, 0x38, 0x38, 0x20, 0x18]}}, @decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x48, 0x8, &(0x7f00000006c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000680), 0x1, 0x0, 0x1000}, @fda={0x66646185, 0x2, 0x0, 0x1f}], &(0x7f0000000740)=[0x28]}, 0x1f}}, @enter_looper, @acquire, @reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x30, &(0x7f0000000780)=[@flat={0x0, 0x0, r1, 0x2}], &(0x7f00000007c0)=[0x28, 0x28, 0x48, 0x48, 0x28, 0x0]}}], 0x1000, 0x0, &(0x7f0000000940)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x138, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000000), &(0x7f0000000040)=[0x30, 0x0, 0x38, 0x38, 0x38, 0x0, 0x18, 0x0, 0x30]}}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=[0x38, 0x40, 0x40]}}, @acquire={0x40046305, 0x3}, @enter_looper, @clear_death={0x400c630f, 0x4, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x50, 0x48, &(0x7f0000000180)=[@fda={0x66646185, 0x9, 0x3, 0xa}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x776a2a85, 0xb, r1, 0x2}], &(0x7f0000000200)=[0x38, 0x0, 0x0, 0x70, 0x30, 0x28, 0x40, 0x68, 0x18]}}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000300)=[@fda={0x66646185, 0x5, 0x0, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000280), 0x1, 0x3, 0x5}], &(0x7f0000000380)=[0x78, 0x38]}, 0x9}}], 0x45, 0x0, &(0x7f0000000580)="d3e27a46dac4e1c3bae54208464efa9162a71eacad1422f320ae6ca9a491db58492e4d7b5ead98c2c5b888bd36f36c849482859e1a444ebd8eb3a5f8100ffe5a4a17e24686"}) 15:31:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x8) 15:31:26 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) [ 233.538521] binder: 10084:10088 BC_FREE_BUFFER u0000000000000000 no match [ 233.557754] binder: 10084:10088 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 233.592917] binder: 10084:10088 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 233.606496] ------------[ cut here ]------------ [ 233.611292] kernel BUG at drivers/android/binder_alloc.c:1130! [ 233.618052] binder: 10084:10088 got reply transaction with no transaction stack [ 233.631410] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 233.637334] Modules linked in: [ 233.646785] CPU: 1 PID: 10099 Comm: syz-executor.2 Not tainted 4.14.108+ #38 [ 233.649630] binder: 10084:10088 transaction failed 29201/-71, size 88-40 line 3025 [ 233.654083] task: ffff8881c2e5de00 task.stack: ffff88819f700000 [ 233.654103] RIP: 0010:binder_alloc_do_buffer_copy+0xc7/0x500 [ 233.654107] RSP: 0018:ffff88819f7075d0 EFLAGS: 00010216 [ 233.654116] RAX: 0000000000040000 RBX: 00000000200023d0 RCX: 00000000000002d8 [ 233.654121] RDX: ffffffff82237477 RSI: ffffc90004d9d000 RDI: ffff8881c48bec58 [ 233.654127] RBP: 0000000000000020 R08: ffff88819f7078b0 R09: 0000000000000028 [ 233.654133] R10: ffffed1033ee0f06 R11: ffff88819f707837 R12: ffff8881c3020298 [ 233.654138] R13: 0000000000000028 R14: 0000000000000030 R15: ffff88819f7078b0 [ 233.654145] FS: 00007f9069498700(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 233.654150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.654154] CR2: 0000001b2f621000 CR3: 00000001c29ae004 CR4: 00000000001606a0 [ 233.654163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.744312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.751579] Call Trace: [ 233.754884] ? binder_alloc_do_buffer_copy+0x1ef/0x500 [ 233.760164] binder_get_object+0x90/0x190 [ 233.764313] binder_transaction+0x1e2d/0x5640 [ 233.768893] ? check_preemption_disabled+0x35/0x1f0 [ 233.773935] ? binder_inc_ref_for_node+0xba0/0xba0 [ 233.778863] ? perf_trace_lock+0x11e/0x4e0 [ 233.783101] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 233.788032] ? __save_stack_trace+0x7a/0xf0 [ 233.792358] ? __might_fault+0x104/0x1b0 [ 233.796417] ? lock_downgrade+0x5d0/0x5d0 [ 233.800670] ? lock_acquire+0x10f/0x380 [ 233.804642] ? __might_fault+0xd4/0x1b0 [ 233.815199] ? __might_fault+0x177/0x1b0 [ 233.819295] ? binder_thread_write+0x512/0x1f90 [ 233.824057] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 233.828991] ? binder_transaction+0x5640/0x5640 [ 233.833682] ? lock_downgrade+0x5d0/0x5d0 [ 233.837831] ? lock_acquire+0x10f/0x380 [ 233.841805] ? __might_fault+0xd4/0x1b0 [ 233.845869] ? __might_fault+0x177/0x1b0 [ 233.849932] ? binder_ioctl+0xd48/0x14ea [ 233.854015] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 233.858951] ? binder_poll+0x230/0x230 [ 233.862942] ? __lock_acquire+0x56a/0x3fa0 [ 233.867267] ? perf_trace_lock+0x11e/0x4e0 [ 233.871514] ? check_preemption_disabled+0x35/0x1f0 [ 233.876556] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 233.881904] ? check_preemption_disabled+0x35/0x1f0 [ 233.887023] ? binder_poll+0x230/0x230 [ 233.890914] ? do_vfs_ioctl+0xabe/0x1040 [ 233.895121] ? selinux_file_ioctl+0x426/0x590 [ 233.899650] ? selinux_file_ioctl+0x116/0x590 [ 233.904148] ? ioctl_preallocate+0x1e0/0x1e0 [ 233.908557] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 233.914448] ? __fget+0x1ff/0x360 [ 233.917988] ? lock_downgrade+0x5d0/0x5d0 [ 233.922141] ? lock_acquire+0x10f/0x380 [ 233.926118] ? __fget+0x44/0x360 [ 233.929491] ? check_preemption_disabled+0x35/0x1f0 [ 233.934607] ? security_file_ioctl+0x7c/0xb0 [ 233.939018] ? SyS_ioctl+0x7f/0xb0 [ 233.942564] ? do_vfs_ioctl+0x1040/0x1040 [ 233.946709] ? do_syscall_64+0x19b/0x4b0 [ 233.950811] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 233.956178] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0d 04 00 00 48 8b 6d 58 48 29 dd e8 33 33 0d ff 49 39 ed 76 07 e8 29 33 0d ff <0f> 0b e8 22 33 0d ff 4c 29 ed 49 39 ee 77 ec e8 15 33 0d ff 41 [ 233.975424] RIP: binder_alloc_do_buffer_copy+0xc7/0x500 RSP: ffff88819f7075d0 [ 233.983156] ---[ end trace a8aaea0fb040be2a ]--- [ 233.988015] Kernel panic - not syncing: Fatal exception [ 233.994733] Kernel Offset: 0x21a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 234.020327] Rebooting in 86400 seconds..